Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa
File: 40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa (raw, json)
Hash identifier: KR/9hx3xQKkLMWyJXmhMEF03N3EKGxmns4/+xWPchi0=
Subject key identifier: BB:40:D5:FD:D6:E2:8A:77:57:08:55:A8:78:E6:E7:0E:39:71:E9:80
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584827C538CFF9ED21D981C76C00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 22612
IP address blocks: 209.188.7.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:38:cf:f9:ed:21:d9:81:c7:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=3b29975c-988e-4658-8a74-6cc983f36724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:26:08:2b:eb:9b:72:bb:c8:b6:3d:a8:7d:
11:3f:27:a6:ed:07:11:0e:50:92:bb:f0:18:55:03:
7a:fa:db:c2:66:9d:c1:c4:9e:76:a0:74:6b:fc:a0:
5a:9d:7e:d2:5f:cb:a4:d7:7b:b7:16:d0:4a:58:d8:
40:51:26:07:36:4e:24:86:26:97:c0:91:68:04:f3:
db:35:0c:fc:43:ef:02:bc:76:1c:aa:4a:bd:04:0a:
0c:52:1c:51:19:0b:e4:d2:cf:15:18:3a:36:a7:44:
47:af:f6:54:6e:44:91:7b:2c:bf:0b:46:04:de:76:
76:e7:9b:b3:21:48:6c:25:f5:39:1b:7b:41:f9:9b:
0a:ed:99:a7:51:ac:e3:ec:a1:40:45:c1:09:34:b4:
97:fc:63:d4:e3:cb:68:5f:dd:64:72:02:09:e2:f9:
26:41:15:0a:19:63:93:ee:89:f2:14:50:ad:37:0e:
96:38:89:31:29:a7:c6:db:e5:46:c9:d5:76:77:fb:
37:16:e2:60:e8:48:de:56:5c:f9:b0:56:bc:9c:d7:
43:38:cc:f9:5b:fc:93:94:b0:ca:ae:c4:67:b4:61:
28:12:86:73:c6:f2:68:0d:b4:fc:24:b6:81:3d:20:
15:1b:19:4b:e0:d5:b0:bb:5c:a5:53:57:4c:1b:13:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:D5:FD:D6:E2:8A:77:57:08:55:A8:78:E6:E7:0E:39:71:E9:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.188.7.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:9b:b8:26:df:23:3d:f0:8f:c8:2a:a0:48:b1:3e:0f:c6:da:
b0:0e:55:fb:9f:68:af:5d:43:85:66:c7:d7:a9:b4:bb:6a:47:
08:01:6d:37:43:13:40:4f:df:09:0a:44:d6:d0:c5:68:91:d7:
9e:b2:f1:14:1a:c7:3d:ff:77:09:f7:88:70:ca:0f:db:fd:bd:
3d:b0:1c:f3:c8:c1:50:51:c2:e1:8c:a2:17:c5:6b:90:90:ec:
e3:9f:d5:6e:43:a8:a9:64:42:ac:2d:eb:66:39:93:4d:57:31:
51:2b:5b:73:a7:68:30:6d:e0:72:5c:6b:97:08:2e:42:a1:a5:
f2:83:49:3b:9e:74:ac:e4:5a:7e:3c:e0:6f:42:0c:a1:b2:06:
e8:fc:f9:bf:f6:46:61:be:89:09:ef:10:c1:95:98:7b:db:c6:
74:ac:89:e7:8f:3f:4a:3a:e4:99:0a:98:47:9a:1c:61:50:50:
83:18:e8:5b:c6:9f:e6:d7:b2:3a:7e:3f:09:3a:46:3a:6f:59:
3b:f3:6d:dd:74:73:88:07:5c:5e:cc:6c:03:c6:0d:c4:df:85:
18:c6:22:c7:f6:01:aa:8e:53:72:c8:f7:6c:7d:f9:d7:05:13:
e5:94:f9:3e:1b:9a:96:9f:64:c6:00:6b:5b:2a:95:a3:73:40:
18:aa:64:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:16:16 2025 by rpki-client