Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa
File: 40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa (raw, json)
Hash identifier: zb+zJptx4REt3KYsQhLlU+bweeANuQr70E04xJW9sB4=
Subject key identifier: 22:E1:4B:08:09:EA:72:06:5D:EE:70:B9:80:EA:80:8A:C4:A6:B5:CA
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584886B07BB11C238FCA55499500
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 271
IP address blocks: 209.87.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7b:b1:1c:23:8f:ca:55:49:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=9ad20ab8-2ee1-415a-9884-8782a474761a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:68:31:13:69:a8:0c:42:79:a3:78:57:8d:
05:a9:05:b4:ff:84:4d:1c:2b:cd:cb:11:7e:31:6a:
62:6f:fb:3c:f5:87:9a:af:fc:ed:c8:b2:92:ef:f1:
7f:4f:35:df:48:d5:96:e2:bb:13:ef:34:3c:56:8e:
d7:30:26:7c:d4:da:00:d3:2e:05:1d:61:62:66:79:
a7:60:ab:04:17:19:eb:0c:3d:b8:c6:1e:23:06:31:
b8:45:c7:02:04:b5:de:88:d3:93:31:9a:50:63:31:
aa:c4:0c:ad:13:b6:83:d9:fe:63:d0:2a:89:61:41:
23:c0:f0:62:04:b8:e8:75:a8:86:55:2d:54:86:71:
f7:d5:ee:27:15:d0:ea:0b:67:a8:39:f8:a1:34:8c:
8c:1a:26:7c:bc:1a:83:2c:4b:d7:67:ce:05:a5:a4:
31:1f:2a:57:ea:26:d1:91:ef:a6:aa:e6:dd:f6:12:
fa:9f:75:72:72:b5:a6:fc:61:c8:92:27:ab:18:47:
c6:ce:b3:24:c3:c3:70:5b:3d:b4:8d:cf:01:e4:c8:
f4:ce:b9:04:39:6b:d8:75:e5:d9:92:42:ea:cd:0d:
3c:63:fd:7d:da:e6:e2:20:eb:d7:ec:ca:4b:17:53:
76:1b:6f:77:a8:1b:d7:5e:d2:5c:97:e7:c4:b4:8d:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E1:4B:08:09:EA:72:06:5D:EE:70:B9:80:EA:80:8A:C4:A6:B5:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.87.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:cc:11:f5:3a:54:c3:cc:30:6b:c9:0e:cf:43:1f:ca:48:73:
69:73:54:f7:58:32:3f:09:4c:f7:76:fe:3d:67:4f:a3:14:6b:
d6:bc:bd:54:3a:b0:cb:09:ea:2e:fd:f0:c9:80:c6:8b:77:06:
e9:3a:ef:9b:df:b8:a2:aa:d2:53:a3:ce:6c:df:c6:7b:ec:e2:
f8:89:ab:3b:bb:00:a1:e7:db:ee:79:fd:16:f7:30:5b:bd:99:
c4:35:ee:1b:d4:37:94:22:b3:3b:49:62:bc:9c:a1:b2:02:2c:
c0:c0:3b:99:fb:00:4c:e2:8f:0e:1c:be:e9:ec:4c:2b:b8:c0:
5c:2b:2e:9b:97:9c:16:00:ac:0e:4f:46:8b:43:87:c2:12:92:
5e:61:bc:2f:92:c8:88:22:9d:04:58:19:dc:58:9b:d7:6e:57:
de:64:c0:57:cc:29:14:f5:1c:9f:33:57:29:89:ac:23:2c:78:
68:5a:2c:0f:df:23:e5:73:67:93:0c:ee:e2:f0:66:98:13:40:
eb:25:8f:bb:0b:ff:08:aa:43:8a:9c:61:ab:a1:45:36:52:f4:
c4:91:66:0c:54:91:29:78:fc:3a:51:2b:a4:b9:da:aa:e0:e4:
fb:76:1f:cc:50:3a:2b:f7:d0:17:91:53:c1:ba:34:b3:65:66:
7d:bf:7d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:17 2025 by rpki-client