Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa
File: 848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa (raw, json)
Hash identifier: 71nlOSps9rF1rWymbSE9CaZ7QGQ77hmQ+fL4KbxDPq4=
Subject key identifier: D7:97:92:FD:07:82:D8:79:CE:29:4D:55:4B:30:E4:B2:F3:E2:FA:BC
Certificate issuer: /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
Certificate serial: 010D0C9F4328584869606A160F39ADA6657DDCA0
Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 398774
IP address blocks: 209.250.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6a:16:0f:39:ad:a6:65:7d:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=bbd27c97-09ed-4b06-8111-9aca8ea61109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:18:90:3c:46:29:e0:d9:2f:51:94:91:cf:
b8:28:fa:b5:d5:85:78:b2:dc:4c:98:cd:ff:bd:77:
78:87:4b:e3:76:d0:62:63:c2:fa:29:b1:7d:27:31:
63:ef:39:7e:4f:bb:da:69:55:dd:50:83:0c:56:0d:
73:9f:00:3d:c2:a3:e5:81:e6:0a:d2:67:97:dc:93:
af:86:db:eb:54:1c:b1:11:f0:7f:7f:02:e5:63:08:
25:70:a0:d4:02:d2:91:c6:05:0d:10:f4:4f:90:6f:
fa:08:3d:24:b6:d4:40:30:37:10:5a:3d:7d:a2:b8:
f7:db:32:cc:a2:fb:51:d7:89:b6:e5:d9:94:b6:a2:
6a:3a:12:9c:2a:5e:fb:a4:7d:84:13:dc:d1:b9:90:
5f:80:b9:64:d0:9f:6a:ae:0a:60:14:42:50:ec:df:
5b:bf:42:19:1b:56:50:38:c7:d2:87:a7:0f:b0:9e:
24:73:0d:f0:7a:d3:67:ab:ea:87:d9:18:3d:34:5a:
4a:7d:68:ce:59:b6:2d:22:17:29:35:2e:05:9d:02:
93:de:e1:8e:5b:0f:67:af:3b:59:68:f9:5b:7a:0b:
3f:54:d2:8c:0b:62:51:bf:ae:9e:40:95:6c:ea:89:
a6:a4:7c:9c:3d:07:43:0b:a8:fc:a0:e3:e6:46:c2:
25:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:97:92:FD:07:82:D8:79:CE:29:4D:55:4B:30:E4:B2:F3:E2:FA:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl
X509v3 Authority Key Identifier:
keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:6c:af:03:99:85:15:3a:8d:44:ef:ad:fe:a9:7f:f4:d8:3c:
8d:97:3f:45:e1:1d:5b:3d:76:c7:24:6c:3f:70:5f:31:a3:d7:
8c:bf:7b:aa:bc:74:84:81:0e:e0:31:10:1c:59:4c:19:b8:00:
bc:87:3e:41:19:89:9b:9b:5e:a6:9c:a5:64:ab:9b:98:bb:22:
25:39:14:7f:3d:f5:08:d8:66:d2:9f:40:97:66:83:64:bb:55:
46:7e:42:bd:d9:b0:98:8c:c5:4f:03:e7:83:4d:d8:fe:fb:20:
2b:71:d4:85:f0:f6:80:13:4d:86:23:9a:33:53:e9:fd:36:aa:
92:37:77:1c:b6:70:ce:b6:99:6d:ac:f7:20:0a:5e:a6:ad:1a:
74:72:2d:02:23:ce:ce:df:10:58:fc:7f:5c:bf:02:8b:c6:0b:
29:40:55:f0:f7:e0:03:8f:1f:c7:0d:ef:a7:8a:c2:b0:4d:5e:
de:2e:c6:ad:08:08:2f:89:e5:2f:2d:38:5e:6b:6b:3e:98:1f:
b2:90:b5:e6:9c:38:63:90:a8:9f:66:0f:ec:a0:f6:fc:31:2d:
72:58:52:30:aa:5e:49:27:d7:df:d9:c3:18:a3:50:62:dc:e1:
19:e0:77:47:79:17:06:9c:e4:0a:95:70:e3:cd:70:40:9e:03:
0d:00:ee:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:23 2025 by rpki-client