Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa
File: f96003a4-5e6a-3408-ad84-035ada29fedc.roa (raw, json)
Hash identifier: PjXvlFHnLp4xxvZEAT0NCpa11aIyvc1q7j/KRCl6RQI=
Subject key identifier: 38:B1:6E:31:0C:B3:C7:93:FF:A5:E4:64:C8:F5:0A:BF:D5:EA:AF:49
Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial: 010D0C9F43285848ADC613A3473B050849019600
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 399635
IP address blocks: 209.221.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:13:a3:47:3b:05:08:49:01:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=bebacce7-0b58-4a07-8663-87c7b1c0f962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:0e:30:23:10:f8:de:3f:c9:eb:ce:8a:5e:
45:bd:15:bc:33:4d:2c:34:0c:fe:7d:da:14:4b:e1:
e9:32:41:32:26:9f:c5:11:0d:c5:44:75:e4:70:c1:
89:c7:f1:3d:b7:22:98:a2:52:f4:95:04:b6:5e:4b:
0c:c8:f3:a6:fd:11:3e:72:c0:87:7d:51:ef:29:df:
4f:ab:68:d4:26:44:50:7e:a1:93:89:63:13:88:68:
02:bc:ff:2b:08:77:e0:74:29:b4:7a:79:be:88:3d:
fd:09:44:48:49:89:08:45:47:1f:e5:22:da:2b:9a:
33:4f:af:45:94:56:0b:79:e6:57:15:b0:17:a7:76:
52:9f:d3:84:54:79:36:0a:db:c2:9d:6f:32:eb:76:
74:52:33:3b:66:ed:26:28:08:a9:ba:44:7f:04:56:
94:03:16:59:52:33:35:89:a8:34:1d:e2:6a:f8:54:
ba:19:3e:78:0f:99:04:85:7e:6d:74:24:d0:cd:a5:
11:9c:4d:eb:7d:cf:25:7c:25:aa:cc:6e:e7:d8:91:
12:b1:fd:e3:d6:fc:54:5d:f1:00:9e:62:8a:d9:f2:
fe:e9:4b:06:71:1a:6e:99:d8:31:cd:b7:68:34:5a:
a7:b7:c6:66:b4:7d:bd:7a:01:57:ce:d2:15:f9:d1:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B1:6E:31:0C:B3:C7:93:FF:A5:E4:64:C8:F5:0A:BF:D5:EA:AF:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
X509v3 Authority Key Identifier:
keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
sbgp-ipAddrBlock: critical
IPv4:
209.221.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:e4:05:ca:b2:41:47:3e:0d:dd:2e:69:a4:f2:50:36:f5:1a:
3c:c6:ab:3b:ee:45:3f:73:ce:81:4b:e1:57:76:e3:20:f6:07:
ab:11:a0:52:9b:f7:e9:56:a8:b3:13:59:98:ef:b3:fd:fb:ec:
f0:e4:f2:3a:3a:4e:21:9a:8c:79:6a:b8:f7:fa:2c:9f:4e:4f:
da:e3:e8:e1:07:ba:6f:63:b5:bf:72:77:6c:ea:a1:c0:de:85:
b6:ff:e3:be:7d:8c:bc:37:00:37:df:73:41:f6:ef:9b:68:d7:
ef:08:ad:8b:dd:d2:84:f0:73:77:eb:74:92:1c:52:72:85:3a:
f3:b2:b1:2e:c5:bd:24:39:55:d1:1f:15:85:bc:3d:09:b2:13:
06:ea:c4:0d:67:82:b2:a3:7b:d4:fd:b7:bc:19:5b:e5:85:5d:
86:6e:97:a6:6b:62:00:39:c3:95:43:b7:cc:26:2c:3e:03:6c:
4c:3d:b8:d9:8f:3a:d5:20:b7:2b:c1:36:95:e8:a1:a4:0d:06:
19:87:8b:2c:33:5b:dd:c8:69:6b:af:9d:f8:70:c9:10:f1:35:
35:9e:16:d9:1d:b1:11:ee:5f:fa:5c:ff:9e:0e:5f:d4:f4:ba:
99:1d:ee:07:6d:40:f0:79:60:f3:0a:e3:ac:b8:bb:be:66:36:
7d:8f:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:03:37 2025 by rpki-client