Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa
File: e409102b-1574-3eb9-9d70-f7404931cfa6.roa (raw, json)
Hash identifier: g4VT/uhOdumsdN5D/AyFJk7eOMT/e4O1uwxVGfTKqGE=
Subject key identifier: 00:C9:7E:3C:48:D2:C8:6A:D3:13:27:83:4C:64:DA:B4:99:73:D1:27
Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial: 010D0C9F4328584851A576413CDC07D3E75B4380
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 13213
IP address blocks: 209.236.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:76:41:3c:dc:07:d3:e7:5b:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=5fbe28aa-4a13-4cb6-b3d1-297671455f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:a1:f2:7d:99:0e:50:eb:4e:75:6d:a1:39:
b2:bb:d3:e7:09:4d:c6:fd:1a:a2:5b:f5:b4:8d:e3:
02:02:b5:9c:53:48:c8:28:1b:91:c7:ae:fd:d3:35:
ab:a1:89:d2:83:f1:89:09:be:1f:13:57:5e:6f:92:
2d:d3:33:be:3d:2c:c6:07:86:6b:88:1b:2c:cc:e0:
7f:98:1f:13:07:fe:f2:31:a5:98:da:2a:da:ef:2b:
e4:f2:d8:1a:dd:45:b6:97:b1:9f:9c:9b:d9:7f:4f:
09:68:f2:3a:90:65:77:0f:d7:6b:32:b8:91:bd:8b:
67:f5:1b:f7:82:9e:42:e4:7f:5d:00:6a:e5:3b:ed:
b8:89:81:24:03:ae:42:9b:2a:72:db:cb:d9:b4:cc:
b6:dc:ae:cf:fb:f7:55:0b:b5:6d:09:8b:cd:2f:26:
ff:d3:4d:d6:e7:61:d5:89:2b:e1:82:3b:15:54:ab:
52:ae:eb:ee:22:49:cd:08:aa:5d:4a:0d:8e:be:aa:
e3:a4:a2:07:8c:c1:ed:9e:71:f3:ab:9b:30:ba:d7:
6c:a9:e4:33:62:71:df:fd:a4:16:3e:2d:83:00:08:
14:5f:8f:f0:c4:87:ea:8b:14:27:01:3e:d1:c3:63:
b5:12:d3:0f:3c:7b:17:e9:89:8c:b4:1b:29:d8:c7:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C9:7E:3C:48:D2:C8:6A:D3:13:27:83:4C:64:DA:B4:99:73:D1:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
X509v3 Authority Key Identifier:
keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
sbgp-ipAddrBlock: critical
IPv4:
209.236.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:f1:7f:9b:32:33:a1:56:c5:95:ff:bd:12:bf:93:f8:8f:8e:
39:3d:15:f7:45:44:f4:0d:e9:60:7b:3e:46:87:68:21:46:e6:
e9:80:6a:cc:17:dc:2e:3b:ae:ed:20:a3:46:51:24:de:26:d4:
01:48:c4:ab:2e:5c:cc:b0:23:ef:bc:6c:f1:a8:b8:91:50:4e:
06:70:84:58:e0:8e:0b:1a:04:7c:31:a9:cc:9c:d6:3b:50:80:
99:b8:5f:42:91:1b:10:fb:98:87:1d:3f:9e:97:f2:c6:ff:ee:
b2:64:76:53:7e:86:48:89:45:2d:cb:ef:13:b1:b9:f7:2c:df:
14:4a:bf:45:5f:de:23:41:dc:6f:3e:e1:15:2d:e9:9d:88:7f:
f7:24:fe:bc:e5:f9:a6:51:cd:cb:b6:18:74:63:2e:cf:6a:e0:
c8:ff:28:47:c6:44:0c:81:75:3f:46:7d:ee:56:5d:16:44:06:
f9:45:4b:56:de:c7:0b:78:8d:15:cc:4f:6b:74:19:ed:be:8f:
1c:2a:53:d7:4e:e7:dc:b1:9f:14:f7:ba:29:83:e3:4d:14:e8:
68:71:09:5b:1f:22:8d:f8:bc:bf:00:38:73:70:aa:df:af:1d:
bc:8d:7b:6a:a7:61:df:7b:c4:9f:57:df:08:cf:d5:81:92:0b:
c5:b6:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:30:42 2025 by rpki-client