Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa
File: 4758cd24-a95f-3bd5-b342-8e08369bfb40.roa (raw, json)
Hash identifier: GXXLe2FO1bwFskdTkLlntAPr/m56TwESrS/IZBCl3G4=
Subject key identifier: D6:03:D9:36:1E:30:B9:68:60:24:90:F1:64:C6:DF:32:FC:C3:CD:76
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848143A6960431DADAE4698D900
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 8560
IP address blocks: 209.46.120.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:69:60:43:1d:ad:ae:46:98:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=6bc4bb75-d68a-453b-a9ed-4edc6e68519c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:2f:63:12:0b:30:46:d8:b7:06:6c:90:dd:
3f:cd:64:80:9a:10:96:24:0b:1f:85:34:91:77:72:
be:85:02:e8:95:df:b2:3e:9e:cf:42:16:c8:28:e8:
ac:e5:ce:cb:68:75:f9:7b:33:21:3b:41:fb:e3:37:
de:49:63:5b:ff:bb:88:0c:33:f4:ac:a6:ad:fc:e1:
a5:a7:29:f9:04:3a:4c:dc:a1:d1:12:ca:41:ae:8c:
45:e6:74:5e:c1:03:90:1c:d2:b8:10:9b:ba:2c:99:
ad:e6:a4:86:78:63:e0:bb:7d:7c:32:ce:6d:00:f3:
f7:05:bc:34:32:8f:00:de:fe:93:36:ea:0a:25:bf:
4c:74:76:a2:13:ec:22:9f:5a:fa:75:4c:e6:a2:96:
a7:1c:eb:1a:52:1f:f0:3a:9d:51:a7:0c:c7:f8:48:
47:02:fd:5a:6c:56:54:b4:91:01:5a:05:1a:9e:3b:
a6:c6:77:2b:9e:c0:79:6a:44:30:24:5b:23:a7:54:
53:94:62:19:36:38:99:35:be:55:91:16:21:40:b6:
d4:a7:fe:5a:06:ae:8f:ad:c8:ce:24:3b:cf:7c:2f:
67:95:63:96:c7:50:1a:bf:dc:ec:0f:63:2f:41:8a:
b1:73:1f:03:d4:ce:d8:16:e7:b0:87:f3:8d:7f:17:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:03:D9:36:1E:30:B9:68:60:24:90:F1:64:C6:DF:32:FC:C3:CD:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
209.46.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:2c:16:20:dc:e7:2c:07:62:31:0b:cf:a8:65:5c:26:0e:cd:
31:7e:52:0d:f1:cf:43:a0:00:de:f8:1b:34:a7:e1:5c:d7:2d:
79:83:17:b8:6c:13:fc:f6:5e:d3:1c:28:8f:d0:ca:a7:11:b3:
69:39:3d:a7:2b:56:e4:ba:b6:76:87:81:ae:11:88:34:17:86:
24:c8:29:c5:7d:80:a2:4b:eb:ac:18:aa:d8:09:41:2f:b6:0a:
75:9e:1e:2f:70:44:55:48:10:15:ca:d5:1c:f8:80:35:6b:d8:
84:75:26:11:7d:5f:8b:44:9a:d7:3a:2d:34:89:ca:34:b7:d3:
67:f2:70:56:4a:34:80:41:fa:44:ef:73:9c:ee:a0:06:75:ec:
41:11:6a:c4:17:fb:92:e1:d2:b4:47:b9:02:bf:cb:ea:6a:88:
2d:b3:81:2e:d3:b6:ff:88:35:12:c4:78:49:fa:c9:04:e8:bc:
f7:30:6d:75:2b:55:1a:b9:a2:8b:05:e2:61:39:b0:98:68:f5:
dd:09:5c:38:cf:5f:be:23:7c:5c:4c:af:2a:ef:b8:12:fc:d2:
ab:79:90:9b:2b:20:0b:4b:20:7b:23:ad:07:70:0f:70:eb:41:
40:30:a9:97:3c:af:a6:18:35:53:6f:8e:76:f6:ef:2c:0c:e5:
95:f1:cc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:35:02 2025 by rpki-client