Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/6a843965-6a31-3da1-9407-4565c9497daa.roa
File: 6a843965-6a31-3da1-9407-4565c9497daa.roa (raw, json)
Hash identifier: 7r1D37XHYuptgdcqBQ2dtZwyS2+DTNSagt+EGOLCo14=
Subject key identifier: 6F:D1:A8:C1:DB:9B:56:D6:BA:5F:70:38:F4:37:FF:FC:35:43:14:11
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F4328584823955147DE9714054CD3FF00
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/6a843965-6a31-3da1-9407-4565c9497daa.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 57043
IP address blocks: 209.182.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:51:47:de:97:14:05:4c:d3:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=7559aab5-db85-4eac-9359-529b6d0878a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:95:7d:7d:37:6b:4f:78:1c:cf:26:95:fc:
a5:d9:78:fa:de:ed:29:af:a8:55:99:3c:62:16:c0:
1b:e5:8b:96:81:5f:00:6c:8b:8a:c6:ab:4e:b6:d3:
88:cc:6c:20:03:f5:07:7a:38:eb:2c:0e:d5:48:c6:
d4:89:a1:74:f1:6d:b5:41:59:eb:f8:1c:5d:fc:f0:
4e:a7:cf:38:58:3f:a6:70:ca:67:04:58:8f:85:91:
61:2f:93:b9:32:fa:8c:21:31:c6:ac:42:20:8f:d6:
37:cf:7b:d2:e5:74:31:10:87:17:92:ed:2a:24:eb:
76:61:31:73:d4:a3:8f:4e:cc:ad:a8:dc:9b:c8:66:
80:db:04:bf:ed:70:57:4e:69:63:76:48:73:4e:3e:
86:a6:e2:2a:9c:96:12:a5:36:c0:59:62:a2:3e:92:
c1:54:e4:a7:09:a6:59:5e:ed:98:59:e1:90:5f:10:
a7:ff:f6:f8:89:65:68:2d:c2:1f:db:06:2a:b9:8b:
1e:de:d7:7e:57:4b:f6:f9:88:6a:9f:4a:09:2c:9e:
f2:25:e0:2f:b0:a2:ab:2c:33:aa:7e:46:9b:58:1d:
b7:23:bb:34:ee:5d:c5:19:99:b3:a4:e0:9a:d6:c6:
12:aa:70:4f:62:ef:b0:f9:50:fd:2f:a6:8d:2e:79:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D1:A8:C1:DB:9B:56:D6:BA:5F:70:38:F4:37:FF:FC:35:43:14:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/6a843965-6a31-3da1-9407-4565c9497daa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
209.182.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:67:f5:13:c5:c2:d0:be:73:a9:fb:78:a3:40:7a:1d:04:a6:
8e:b4:02:11:1c:b1:65:ad:f3:22:a0:44:ca:83:70:a9:ad:87:
71:77:00:f1:6a:a8:fd:af:62:b2:f9:13:3b:70:73:ab:44:0a:
84:dc:bb:b5:8a:ba:cf:3b:65:69:94:78:05:07:b0:3b:0a:56:
e3:c9:64:d0:2e:d5:a2:9c:38:9e:f3:5c:ba:4b:cd:38:26:a8:
7a:39:0c:10:24:6f:58:dd:66:2e:53:a3:e6:24:61:0f:ba:08:
5c:38:6d:15:78:31:4e:e1:7d:e4:b3:ce:ac:95:55:50:9f:74:
ba:37:b8:c0:65:b9:f3:63:b8:75:b1:18:e1:30:23:ef:bf:44:
c2:4b:f7:18:f9:77:3e:f3:f2:02:fe:d0:47:86:65:c0:c8:3c:
eb:84:27:b8:bc:fe:48:c9:06:c3:4a:a1:2f:f0:32:e2:df:66:
24:f1:29:f2:69:f2:07:29:17:89:6b:7b:43:1a:45:ee:a9:5d:
98:b2:99:3e:2d:dc:1e:6e:d7:1a:be:17:3f:4e:ec:e4:f8:fd:
11:36:3e:a5:68:3e:9d:3a:8d:89:68:1b:38:ef:41:c0:9a:f6:
3a:72:70:03:93:ff:91:7a:ba:75:a4:4f:b4:ee:c3:93:98:da:
ca:1a:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:14:10 2025 by rpki-client