Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/aaae3b11-4bb1-3337-b45d-d1d287a232a6.roa
File: aaae3b11-4bb1-3337-b45d-d1d287a232a6.roa (raw, json)
Hash identifier: r+8dh2qa4et+HE4g/IYcpxZUxqKF843qTa5vV4Rsdxg=
Subject key identifier: 45:B4:EF:3C:39:85:7C:2C:FF:9B:C9:52:50:A5:04:FA:F8:5E:0B:6B
Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial: 010D0C9F432858486EF5C011C5BD46FA56820F00
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/aaae3b11-4bb1-3337-b45d-d1d287a232a6.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 13213
IP address blocks: 209.95.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c0:11:c5:bd:46:fa:56:82:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=83f02dd1-70b3-4091-830e-94779c5b1d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:02:8c:ed:ce:25:c9:c4:d4:e9:1b:cb:8b:
0c:6c:93:67:ca:0a:38:4a:4b:34:c7:7f:bf:74:a5:
f1:59:c5:70:5e:00:7d:7a:7a:79:37:0c:df:05:0b:
18:6f:00:0d:44:63:c4:d8:f0:7a:26:31:91:b8:9c:
9f:ca:3a:6c:40:62:df:09:cc:2a:11:3c:cc:8b:94:
c6:45:76:ff:04:2a:ac:1f:e8:82:4a:ea:fc:ed:5a:
4a:53:85:a1:6a:e8:96:ac:0b:ea:86:85:81:0d:8b:
56:42:8c:46:83:d5:fa:d5:5f:b4:05:7c:9b:eb:1a:
cc:24:e6:d1:d1:5f:f4:16:9a:bf:25:73:a6:33:56:
b7:75:ba:af:20:28:3a:fe:2b:50:f7:24:b6:76:a6:
66:e0:80:30:8b:de:ca:85:e2:ad:73:d4:1b:e1:6f:
18:0d:21:43:b6:49:dc:7b:1e:cd:7d:86:c9:7d:e3:
31:e9:29:40:ec:7f:ab:6e:39:b2:59:aa:b5:27:03:
c5:8d:af:c8:7e:3d:15:a3:cd:92:d3:1c:61:bc:ed:
a7:bf:a3:52:5a:a2:db:54:81:0a:01:2e:3a:fd:f4:
36:89:83:3a:52:6e:0f:7a:c7:1c:bd:d3:a5:f9:70:
63:09:78:ec:dd:ad:d2:b1:01:98:79:63:a0:54:73:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B4:EF:3C:39:85:7C:2C:FF:9B:C9:52:50:A5:04:FA:F8:5E:0B:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/aaae3b11-4bb1-3337-b45d-d1d287a232a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
X509v3 Authority Key Identifier:
keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.95.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:8f:c9:d9:bd:28:48:3d:13:b4:c5:96:aa:d8:4a:f2:43:1f:
d2:ae:47:bc:da:9e:ee:7f:a0:54:df:8b:78:84:04:7c:8c:75:
fb:3e:5f:95:f8:98:ec:1e:cf:72:5a:74:1c:f1:f7:18:00:ad:
89:5c:84:d1:e6:36:ce:ef:ad:57:02:01:bc:32:e0:9e:85:ff:
b0:1b:6a:66:d1:cd:fc:80:39:0f:f5:6e:36:03:82:08:c1:db:
9e:25:cc:1f:72:3f:62:3c:93:71:b1:98:7e:fa:f9:22:e8:fb:
93:6e:a0:7b:41:5a:05:48:48:69:60:c8:53:9a:67:b3:e3:2a:
46:55:ae:70:05:7f:fc:8e:2a:f2:4c:6d:59:5a:14:98:5f:66:
85:f0:5a:f1:a0:fe:e2:a4:53:20:29:06:e7:41:13:e7:68:d5:
fd:f1:8f:ed:4f:ad:c7:fd:92:05:65:5d:02:ff:d9:1c:90:26:
4e:c7:5b:5a:3a:02:d4:bd:aa:23:c7:73:63:8c:02:ba:36:29:
25:30:1a:39:31:5c:5e:49:1b:1b:53:f3:97:2f:1d:20:26:79:
48:16:11:2e:cc:1a:40:cc:64:df:e3:84:8d:06:e2:15:01:1f:
96:74:de:f0:f2:fc:6d:86:1d:41:a1:bb:9a:1d:e6:bb:f8:62:
9e:c7:f5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:32:16 2025 by rpki-client