Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa
File: f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa (raw, json)
Hash identifier: RwV/kI7D5j5lRkZp900PbVgIveP/oBcbx0qnp8IL9SI=
Subject key identifier: 8B:84:62:E1:BC:8D:03:07:68:4C:AA:51:4E:3E:04:6F:0B:D4:5C:01
Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial: 010D0C9F43285848653037A1E842BF92C5BA9640
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 16604
IP address blocks: 209.124.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:37:a1:e8:42:bf:92:c5:ba:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=f834c95e-a4cd-4628-96e8-4c779ea3ec54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:69:9f:6a:e1:59:ec:88:84:d1:c8:25:b2:
cf:6e:a5:eb:8c:c1:d8:97:c0:aa:d7:7d:59:58:0c:
51:83:58:4e:5e:a7:b8:b1:c8:be:1f:ce:89:16:07:
a4:08:dc:04:77:14:f8:8d:44:28:3a:21:39:6f:a7:
13:a8:1b:c5:b3:4a:bd:4c:b8:42:1a:1e:b2:9a:09:
a4:2c:14:09:68:b4:30:f1:1e:1e:d7:37:8d:88:81:
96:ee:0b:19:60:b8:96:5a:92:64:38:1c:4e:1e:d8:
45:a5:f4:1f:99:f9:cb:23:50:21:66:a6:c4:4d:dd:
4b:6a:ac:aa:69:3d:37:0f:27:e9:c9:58:d6:f5:4d:
db:77:3e:43:16:de:b4:08:15:37:14:a8:19:75:d2:
93:f4:ca:fc:b6:83:e7:44:9c:49:15:02:2e:2c:fb:
a3:60:5c:39:a4:0a:fc:c3:c8:e3:b3:3c:0b:39:9a:
39:b8:99:29:17:08:b4:85:c4:47:6f:26:fc:42:12:
eb:6a:19:18:41:d5:83:0f:23:b6:b0:82:06:7a:2d:
eb:b7:59:82:c3:2d:26:91:09:50:bb:e4:07:b7:db:
c0:4c:2e:06:66:c6:99:6d:3f:fc:bf:30:88:48:4f:
05:f8:81:ee:2f:7e:97:cf:c1:55:be:92:f9:3b:a0:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:62:E1:BC:8D:03:07:68:4C:AA:51:4E:3E:04:6F:0B:D4:5C:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
X509v3 Authority Key Identifier:
keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:9a:a2:ea:ab:0d:23:d5:2d:cd:01:91:77:64:95:72:28:c7:
ce:ae:de:c2:f4:26:61:c1:2e:52:5b:60:4e:f4:c7:96:cd:bd:
3f:ca:60:f7:ae:4f:f8:24:59:cb:1c:d1:bb:04:29:17:3d:68:
39:90:f7:11:7e:5a:ed:ac:19:22:0a:7f:34:83:9f:e6:ad:9b:
fd:67:76:d4:bd:de:7b:b6:8a:4f:29:bc:77:df:03:ed:ec:d2:
6d:03:f6:82:41:aa:43:e1:08:79:ea:5d:2a:bd:7a:0a:58:52:
20:da:14:c2:6f:be:2d:04:b7:5c:fd:34:cf:48:41:3a:e1:b8:
4b:69:48:6a:dd:e2:e8:40:24:dd:7d:52:75:14:b6:36:ec:d2:
47:e3:0e:e6:d9:7b:be:5e:5a:ff:47:f5:42:42:17:f2:7d:be:
87:2a:08:7b:c7:80:aa:64:f4:0d:68:ef:79:35:fd:28:ba:b4:
72:85:fc:b7:bc:74:c0:43:07:5d:a7:fd:15:d3:fb:7f:ed:de:
35:5c:be:2a:2b:44:35:bb:03:6b:24:26:f3:4b:ad:2c:0f:02:
42:b6:52:9e:90:91:02:33:c7:72:8a:5e:29:80:07:c1:76:1d:
e0:97:06:5a:e8:13:39:93:e7:2f:bd:c8:e9:2b:59:bb:1b:be:
a5:19:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:12:40 2025 by rpki-client