Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa
File: 1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa (raw, json)
Hash identifier: ThpQr3EAWZ+ogI2yLxx7G1y8cfYIbqL/J30pAWVtbX0=
Subject key identifier: D9:A4:74:FC:DD:AE:0D:97:41:E7:C7:0D:F3:25:92:05:5D:E2:9E:F7
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584854702710BB76D8F3DF2359C0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 1239
IP address blocks: 209.20.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:27:10:bb:76:d8:f3:df:23:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=a97f7f4d-6853-4c99-9eff-129502f07c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:95:3d:5c:1c:aa:94:be:79:ec:b6:a2:c4:
5e:4b:f7:10:c0:f2:7a:fa:17:bd:44:7b:db:97:a7:
e1:c2:a4:d7:42:e8:ca:ed:b5:96:d0:2c:7c:75:e6:
a4:1d:78:38:d4:c9:91:a6:06:7d:51:5b:92:ed:5d:
ba:e6:80:22:37:87:0d:12:87:00:18:04:7c:ae:51:
6f:b3:a5:f8:73:32:8d:3a:24:c2:81:49:4b:f4:79:
71:e5:bc:63:84:a0:f5:d3:7e:b2:25:1b:78:d9:5b:
37:11:5f:e5:08:c1:2e:08:89:86:d2:33:01:97:1a:
9e:66:d2:5b:5a:51:9a:bc:6f:f0:a7:67:aa:d4:ab:
7f:81:1e:5b:fc:05:2a:63:11:65:cd:fc:d0:86:d6:
d3:f0:03:3e:b7:4e:9c:c3:72:88:f7:58:62:78:9b:
d1:e3:36:4f:11:0b:d3:c2:b9:72:a6:b5:d7:a1:7e:
61:26:57:ae:a2:22:13:4c:c7:a2:0d:5c:be:57:a1:
36:98:7b:4d:de:33:41:e5:05:9b:ae:f4:6d:15:c8:
ad:77:0c:2b:fe:b7:c8:dd:fe:cd:cd:be:7e:72:67:
d8:d8:df:30:b9:e5:c8:c5:db:b8:ef:56:97:b8:35:
a9:ba:29:ae:89:56:16:13:ef:0f:90:23:29:67:67:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A4:74:FC:DD:AE:0D:97:41:E7:C7:0D:F3:25:92:05:5D:E2:9E:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:11:c2:68:cd:70:56:cb:1b:03:66:77:6e:64:7c:36:98:4f:
9f:bf:6b:80:99:ae:22:20:b3:41:ab:66:ef:9f:5d:fd:47:0b:
0d:7d:32:c7:6f:c8:d0:04:87:2c:ba:0a:79:a8:bc:07:d4:1f:
91:dd:ac:b6:72:94:ca:48:4a:3d:47:a1:0b:07:0e:cc:21:22:
73:d5:e0:b5:29:80:39:18:2d:86:64:74:57:e4:2e:a5:af:1a:
b3:35:f8:8d:0a:ad:4c:ee:4b:80:b8:a9:e0:87:66:af:68:0e:
96:ba:9d:65:79:7c:fb:60:48:3e:e8:56:42:16:86:d4:cf:bd:
53:fa:d5:3c:79:b1:75:0a:c8:4d:9b:6e:56:88:3d:26:5e:5b:
b9:32:af:1e:14:27:f2:d9:41:04:28:19:6a:0d:0f:3b:3b:5b:
95:10:60:a0:55:b7:1b:3c:51:91:5b:d6:45:21:14:ad:84:61:
6b:28:33:7f:ef:dd:30:77:47:c5:60:33:c1:d9:79:5a:01:e6:
2d:57:3b:47:43:e7:95:07:93:de:5a:e9:3a:03:3e:94:0d:ee:
db:c7:b3:ff:31:00:0a:63:d5:c4:7a:3d:10:9c:49:b4:08:ec:
ff:66:52:7d:2a:65:60:3c:15:ba:a6:71:05:35:7b:8f:65:3e:
0c:d5:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:23:48 2025 by rpki-client