Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa
File: f1f615a7-b544-390a-b957-864e92a670f9.roa (raw, json)
Hash identifier: EimQBbWkiBiCP2rItgurXH8MLkA3gx+U37shxtLOUeQ=
Subject key identifier: F8:9D:D7:D9:AD:5D:9A:01:AC:03:64:25:6E:30:B5:31:F1:32:A4:D0
Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial: 010D0C9F4328584834556A08C75AF99521DF7C80
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 32181
IP address blocks: 209.212.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:6a:08:c7:5a:f9:95:21:df:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=cdda8317-7e3a-4ef8-9d6e-24db1e70226f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:98:66:fa:07:e9:66:56:db:dc:e2:0d:90:
b4:0a:b1:34:de:8c:c7:40:41:6e:81:d5:96:6b:ea:
31:29:29:f4:5b:41:32:4a:91:42:b9:0a:17:1a:24:
30:92:fe:b1:b0:b4:d4:a3:2b:80:c8:00:a3:9c:79:
69:06:94:96:bb:87:19:ee:db:fb:0f:61:d2:b6:a1:
89:4a:7e:66:68:27:b3:66:93:79:90:9c:81:80:80:
72:9d:1d:1f:fb:ed:9d:6c:74:93:a2:01:8d:32:f3:
1f:52:f5:bb:2c:4f:e1:80:40:e1:7f:2b:5b:cb:73:
6b:57:6c:44:f7:fd:7a:50:16:02:b2:e0:cb:47:63:
ef:51:85:22:4d:da:a7:cb:06:1e:53:1e:98:76:30:
05:31:cc:09:d6:ad:3f:47:19:20:18:16:cc:34:73:
77:a1:4c:78:f1:e0:60:2a:fd:6e:43:69:75:00:42:
d8:fc:0a:62:4b:05:09:39:78:f8:41:33:25:06:02:
65:3c:34:f7:01:87:89:46:d1:d7:cc:3b:20:16:78:
6e:72:96:b6:5d:ab:f4:03:59:bc:54:cd:1b:8a:ee:
01:8e:e6:d3:73:ce:2d:0a:9a:95:68:9e:4f:d9:b6:
68:d1:31:71:27:2e:9f:b6:eb:00:0e:8d:d9:fa:a0:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:D7:D9:AD:5D:9A:01:AC:03:64:25:6E:30:B5:31:F1:32:A4:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/f1f615a7-b544-390a-b957-864e92a670f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
X509v3 Authority Key Identifier:
keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.212.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:5e:69:87:90:9a:c1:9d:a7:85:ac:8b:d5:2e:47:f9:c7:48:
72:9f:9a:21:32:36:b9:fe:c8:9e:e7:dc:f7:87:fa:f0:f2:0f:
1f:30:9b:02:9f:79:b4:28:55:7f:98:cd:b2:13:e9:60:ee:03:
23:a3:4d:a8:44:ae:1c:a7:93:04:67:3e:82:63:e6:55:a4:c2:
ff:48:09:45:c4:a0:f4:22:fb:15:63:5d:48:eb:f3:50:e1:42:
06:03:24:8a:8c:57:14:e1:05:97:50:b1:de:7b:c1:e4:1f:e6:
00:1e:ac:74:56:d7:ca:bc:d1:41:ed:d1:b2:2e:09:71:99:d8:
5b:a9:c3:46:82:3c:5b:f5:0b:3a:2b:f1:24:24:15:73:ed:80:
5c:b3:67:36:5d:ce:d5:3f:a3:3d:21:e4:d7:1d:3e:65:df:b9:
2c:e4:ce:95:2b:3c:08:9d:27:40:a6:9a:57:85:ae:96:81:2b:
a8:d0:56:6e:4a:b6:c8:0d:c8:b1:51:2b:cd:58:4d:24:a8:e1:
35:a5:be:e0:99:18:1d:95:17:22:72:5c:bf:04:e1:55:7d:7a:
d2:d5:ea:d6:0c:a6:de:19:c2:15:58:39:1b:eb:58:7b:0c:de:
c8:0b:35:60:6f:c0:cd:da:ee:26:7c:6b:a5:c6:6e:1c:98:42:
e3:06:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:56:53 2025 by rpki-client