Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa
File: f18517cc-6da9-30ab-8184-12b511ccaa4c.roa (raw, json)
Hash identifier: Cuuxe2nPrOQZRs5wHyFSZ1Rdqt+gb8pbGqxDJWIbqhs=
Subject key identifier: 2D:F6:95:82:3A:22:FE:A8:4F:70:45:FA:37:29:95:96:95:F2:AF:81
Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial: 010D0C9F432858481F652A4870D713D283F63080
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 30698
IP address blocks: 209.221.240.0/21 maxlen: 24
209.221.248.0/22 maxlen: 24
209.221.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:2a:48:70:d7:13:d2:83:f6:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=a89ea066-d133-4301-824f-c87834f05490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f5:63:14:4c:97:c0:cd:40:14:7d:02:4c:f8:
f2:74:94:b5:ea:b8:81:bd:2e:0e:9e:45:9e:56:2e:
96:c4:9d:29:f5:03:19:29:cf:9d:57:e4:34:db:36:
4a:12:11:b6:a9:62:6f:88:b7:54:bc:c3:5a:36:54:
b9:b6:ac:f1:43:8b:72:f7:aa:99:fa:83:aa:d7:2b:
66:23:87:2b:01:ea:e6:c0:84:dd:1b:66:5a:19:c1:
c1:20:35:ed:5c:97:7c:49:7d:19:5d:25:06:15:ef:
c8:ef:7c:2c:8d:27:54:b2:f3:08:33:85:4c:99:3a:
e8:72:93:d6:7d:0c:00:27:d1:0a:32:d7:13:04:99:
e2:8b:69:a9:a6:f8:68:6c:97:aa:f2:64:18:97:33:
bf:f4:7d:c1:0e:38:7a:74:b6:02:c9:d7:ed:bb:b3:
50:9c:08:59:bb:90:4e:e6:0a:47:a6:f3:a8:0a:de:
2a:ff:f9:7f:69:58:ae:2b:d5:e6:e2:35:1a:cd:b7:
23:2e:e4:27:d6:e1:c7:ca:86:32:74:dd:4b:f9:8f:
a9:7e:2e:22:13:57:e2:b5:00:94:82:72:c0:02:aa:
3e:dc:ba:63:c8:7a:41:9c:c5:37:37:fc:80:9f:eb:
e9:75:a3:5b:7a:1d:34:14:69:f8:c8:dc:ef:b3:19:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F6:95:82:3A:22:FE:A8:4F:70:45:FA:37:29:95:96:95:F2:AF:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f18517cc-6da9-30ab-8184-12b511ccaa4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
X509v3 Authority Key Identifier:
keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
sbgp-ipAddrBlock: critical
IPv4:
209.221.240.0-209.221.253.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:f1:53:52:c1:9f:3c:40:42:37:e8:02:e4:bd:b5:86:ca:9c:
c9:28:ec:9f:74:fe:41:95:7d:31:c0:01:a3:f9:10:e7:38:cf:
2a:49:3e:76:22:3a:ae:32:40:50:f6:f8:a0:be:a7:42:ef:26:
ae:65:92:c3:01:af:44:0a:49:f9:94:bc:00:fe:27:31:34:67:
89:3a:1d:1a:6e:76:11:cb:c7:7b:06:64:a5:1e:11:d4:9a:7c:
30:43:3e:fa:1b:bc:b3:f0:85:93:13:62:f3:61:31:fa:67:76:
72:6a:03:15:0d:5b:f5:b1:1a:d3:e3:63:c5:49:1d:c5:88:3d:
4e:b4:d8:68:45:2d:3f:fe:b5:0c:1c:e9:04:5b:9e:3b:e0:76:
e8:30:76:b7:20:12:6c:36:48:34:b7:9d:66:89:f2:fa:fa:4e:
66:36:f8:c4:c3:30:1c:bb:2e:10:86:e1:ff:f2:33:1c:45:a3:
31:0b:51:17:3d:ff:2b:01:b4:34:2e:fd:0c:f7:66:7b:87:b3:
50:99:3d:b2:ed:b4:65:0b:5d:1e:65:e5:7c:be:fd:08:99:1b:
d0:bd:fb:d9:9f:4b:73:78:55:7e:42:2d:49:45:50:9b:9e:5d:
75:dc:a1:92:f5:37:4c:ab:a5:87:6c:aa:c6:70:28:91:03:17:
8a:96:0f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:46 2025 by rpki-client