Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa
File: b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa (raw, json)
Hash identifier: RGLxoWQ1AjBDw6tZgkZ+NqV/Q6c8DtJBhxrbcmHZIic=
Subject key identifier: BE:55:CC:35:67:F1:1F:B2:57:36:80:93:69:DA:22:0D:31:E4:F1:31
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858487CEB3BEE242AD3B9246CC640
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 393249
IP address blocks: 209.87.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3b:ee:24:2a:d3:b9:24:6c:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=a8200c72-ff12-415f-b8db-265ad27daded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:91:cc:eb:b4:0a:27:93:db:f2:e7:e6:66:
b4:e7:ab:4c:df:ea:3d:bf:81:00:09:1c:86:7e:e3:
b6:6e:04:e3:fd:b3:4c:0a:10:85:a9:4e:71:3d:47:
8a:a6:3e:74:5c:a8:55:eb:a9:f6:2c:40:de:ba:00:
ec:f7:71:09:30:54:7a:0e:2a:ce:f7:46:19:bb:d5:
2a:f8:e4:d4:85:df:d2:df:a9:39:64:2d:de:02:92:
7a:95:73:69:6a:91:e2:cb:c5:3a:34:d9:59:52:65:
04:37:43:e2:3a:15:ea:b6:a8:a5:0d:02:01:fc:4b:
43:47:f6:14:93:cd:91:94:90:83:ba:d0:9a:32:1b:
65:2b:f5:cb:51:8e:cf:ee:f7:57:a5:b3:7a:1a:1b:
cd:63:bf:9f:95:62:f1:4b:81:a5:6c:3e:dd:74:a4:
ad:d6:bf:0d:a8:87:e8:ae:1c:ad:57:66:02:a7:21:
de:df:d3:63:df:84:ff:6d:61:74:b2:8e:3b:c6:b6:
0e:b1:6b:4b:05:80:82:fa:be:31:e9:25:b4:c5:14:
8e:ac:8a:30:0e:27:41:a0:35:17:9e:ab:5f:5f:2c:
d9:82:b2:8d:20:9a:e2:ba:cf:7e:49:c7:e3:4b:20:
49:eb:71:0d:1a:e1:b4:1e:eb:25:a9:38:11:86:ec:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:55:CC:35:67:F1:1F:B2:57:36:80:93:69:DA:22:0D:31:E4:F1:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.87.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:64:30:e6:03:e4:77:b2:71:e4:22:c8:b1:cb:e3:84:35:de:
9e:c8:48:cf:5e:8c:79:04:77:e5:b4:34:27:e1:a5:77:53:3c:
5b:00:a4:4a:58:d1:84:f3:54:ff:fc:bb:ec:93:2c:20:72:9f:
bf:e1:09:89:42:61:a5:03:17:8f:7c:df:a9:75:8c:d8:3d:c1:
98:0e:6e:05:68:a7:03:65:02:78:66:11:46:f8:9c:14:1c:b8:
de:a7:72:9c:4e:55:e3:6f:e8:00:8e:9e:2e:f5:69:d7:17:3b:
91:b1:b1:94:1c:f5:9b:b6:bb:f0:bf:08:77:ba:f0:21:91:38:
5e:7f:9e:d7:da:b9:bd:26:82:88:23:38:42:e8:55:c7:c7:08:
2c:85:ac:27:a3:8b:56:80:21:79:61:4b:a5:12:83:c0:cc:a1:
7a:d3:10:05:bd:00:78:e8:bb:1e:71:db:1f:22:6b:bf:9f:1d:
73:25:ad:96:72:71:85:2e:fc:38:b2:55:12:fb:bd:1a:7a:22:
b5:97:18:41:0a:da:ba:87:84:8b:cd:0f:78:73:a5:a8:fb:b3:
d0:43:b6:09:c0:ee:f7:7b:ba:59:d4:62:ee:fb:f9:e6:4f:ee:
5b:9d:9b:b1:38:1c:82:7f:3b:9c:c9:fc:d3:77:1e:a2:f3:39:
6b:39:d2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:00:55 2025 by rpki-client