Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/e74fae3a-44aa-3188-b2bc-0116bafe1d01.roa
File: e74fae3a-44aa-3188-b2bc-0116bafe1d01.roa (raw, json)
Hash identifier: YbKWcAV+UnoA1NnfW3tXeglVHc5xp6LjosnTUiTJBuw=
Subject key identifier: 81:3A:0F:BB:E1:3B:24:2F:2C:BD:FF:7F:F7:98:F4:7E:47:CF:E5:D4
Certificate issuer: /CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
Certificate serial: 010D0C9F4328584863CB0FE76A2BFAFE1D4AC940
Authority key identifier: 8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/e74fae3a-44aa-3188-b2bc-0116bafe1d01.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 5065
IP address blocks: 209.209.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0f:e7:6a:2b:fa:fe:1d:4a:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=7ab9adc5-d32e-4894-b90a-a5a112279e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:48:d0:a6:b3:e5:02:ce:1c:d8:48:d3:6a:
9e:fa:91:be:ac:38:a6:65:81:e0:82:a8:98:86:51:
00:c0:05:62:eb:49:3e:e0:d8:4d:cf:e2:ae:38:54:
fa:d8:ba:fd:26:0d:d8:c5:94:a8:62:93:77:c5:1b:
9e:c1:bf:85:c0:6d:20:54:a9:cf:cc:b7:2f:20:89:
cd:32:81:b0:e1:97:d4:c3:90:ed:dd:53:63:62:50:
5f:4d:ee:8c:62:21:f7:d3:26:5b:24:ca:52:30:37:
40:e5:59:2b:f0:1a:0f:96:9a:68:ff:6f:e9:12:e4:
6b:d4:ff:8f:fa:31:df:9c:21:df:d0:a6:06:68:0c:
e2:de:4b:37:e2:18:f6:a0:a0:a9:ba:45:8e:66:e5:
78:54:c4:63:e1:f2:af:32:8f:85:3a:20:30:43:b4:
09:0c:aa:4e:38:d4:32:ed:a9:8d:e3:67:49:e9:35:
cd:6e:c2:5b:78:39:80:33:aa:10:81:71:6b:78:a2:
61:ee:68:ec:33:20:ce:91:6e:be:ad:98:ae:0f:f7:
fa:7b:d3:42:e3:21:0b:08:08:58:9e:da:ec:7f:8e:
2c:04:6a:28:58:a7:c3:f2:dc:a8:70:aa:7c:ea:00:
ac:a3:84:1b:81:55:41:28:7f:60:13:7a:40:bc:c1:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3A:0F:BB:E1:3B:24:2F:2C:BD:FF:7F:F7:98:F4:7E:47:CF:E5:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/e74fae3a-44aa-3188-b2bc-0116bafe1d01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl
X509v3 Authority Key Identifier:
keyid:8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:98:d6:a8:6b:ad:f8:8d:8e:50:42:95:48:2f:34:30:a0:28:
4c:35:7f:e0:f7:fd:a5:b3:c4:61:25:7e:01:94:d2:f7:b8:52:
ae:c6:a9:a4:f2:52:0e:9d:c9:e8:7c:42:9f:ce:72:59:a4:5d:
8c:a9:40:b7:8f:f3:b6:c3:6c:b4:46:d2:b2:e7:8b:d2:d3:78:
a6:ab:3f:21:e6:97:49:91:a3:af:5b:44:f4:11:62:db:ef:31:
e4:a7:bc:92:07:9c:c8:2d:9e:a6:09:9c:b2:99:80:9d:ca:cf:
f0:51:f1:e2:56:8b:48:1a:0a:59:27:aa:69:ad:45:0a:ad:06:
b4:9f:d5:b8:22:77:ad:db:b9:e0:e9:4c:41:5e:56:66:55:65:
5f:00:55:6a:42:2b:7b:9f:d9:5d:ea:9c:f3:dd:94:ea:2a:04:
9d:3e:fb:11:f8:bf:a2:a1:83:49:69:f5:ba:80:93:1f:cc:76:
52:6d:59:8b:e4:02:43:36:f7:66:a1:59:11:22:9a:5f:b5:d3:
ad:8c:2e:e1:78:39:f0:4a:2e:99:d8:bf:d6:8d:b6:9c:91:b1:
9f:96:92:68:7c:fc:4f:4d:ac:9c:e0:2b:21:4b:79:81:7a:3f:
0f:fb:13:74:75:51:17:20:81:2a:9f:4d:2f:1a:2f:fe:17:d1:
19:94:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:11 2025 by rpki-client