Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa
File: 24ee7603-c18e-3075-87a3-2e79abe90370.roa (raw, json)
Hash identifier: LfbiIgS4zI8AysqALEVn68cwh1SkfSg/MVgb7DWadM8=
Subject key identifier: 25:9A:98:66:1A:6C:CF:57:77:87:0A:16:CA:62:08:AC:FC:FA:43:64
Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial: 010D0C9F432858486695BAD0A31358A4C341A5C0
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 14618
IP address blocks: 209.114.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ba:d0:a3:13:58:a4:c3:41:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=9440b385-4e39-42ad-946c-bacaf5c4a7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:33:39:2f:93:60:11:98:1f:ef:f1:24:4f:
1f:d2:95:45:0e:9c:f5:88:7b:ab:db:36:85:bb:af:
75:6b:a1:a3:25:4b:d4:e3:47:da:72:47:be:2b:89:
7d:fb:fd:ca:76:a9:ba:e5:10:73:9d:0b:36:d7:d2:
5d:00:17:6c:27:b2:01:68:88:cf:d0:27:c6:ce:22:
e7:31:6f:80:5a:0d:88:0c:73:8b:6c:8b:e8:7f:27:
5e:62:8e:63:ca:15:a2:27:d2:cb:52:38:9c:b3:be:
3d:3c:d4:55:0a:4b:ce:f9:4b:e3:ff:be:2a:21:16:
47:49:81:49:7d:8c:94:fe:82:5f:ef:11:3f:a9:55:
3a:1b:dc:1b:03:65:54:6f:46:99:cd:70:fe:24:a6:
a1:6d:5f:ba:38:d1:4c:1a:d0:d0:fc:06:bb:f7:f3:
ca:f2:b6:30:86:15:af:f5:f5:cb:c4:52:aa:a4:3a:
dc:7b:3f:52:a9:a5:90:91:9a:57:99:a1:d1:d0:cb:
91:b8:1a:d6:21:98:12:8d:c8:7f:91:a6:03:83:05:
0d:8d:67:c5:83:56:0d:73:69:9b:d2:0e:06:0f:b9:
f8:65:3d:bd:8f:63:39:b0:2b:9f:3f:13:92:54:76:
86:3b:cf:14:c2:e1:29:f8:14:9b:02:8a:56:cd:db:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:98:66:1A:6C:CF:57:77:87:0A:16:CA:62:08:AC:FC:FA:43:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
X509v3 Authority Key Identifier:
keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.114.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ad:c4:c3:14:f6:34:f1:62:a7:07:c2:90:93:43:35:bf:0f:
07:9e:cc:26:2c:4e:e5:58:96:ec:6a:70:cb:1e:e8:4b:92:d8:
9d:f2:df:4c:ad:ee:b9:61:a7:f4:35:4a:95:fc:6c:33:a0:75:
37:5f:5f:c0:67:e9:84:b5:0f:9d:6b:9f:20:a1:98:00:c7:9d:
45:30:da:ba:02:7b:c5:b4:e3:7d:48:df:27:f5:1b:c1:b9:59:
89:c8:45:d1:b7:34:ce:0a:11:f0:c7:4a:ce:31:33:3e:64:1a:
67:42:dd:be:b8:90:50:72:d1:96:47:0e:78:c3:71:ff:c3:88:
f3:28:1c:f1:d5:27:a7:92:94:84:32:40:e3:98:49:9e:3b:cc:
bd:77:7e:d3:2b:bb:e8:f5:d0:f2:87:58:3a:2b:65:7d:b0:68:
cc:82:94:50:14:b9:3a:91:13:d6:cc:77:c7:25:bf:08:cd:63:
4f:fe:6b:36:77:bc:87:cc:83:61:85:e6:eb:22:ed:8e:89:03:
8b:3b:e9:ae:29:7d:f4:5c:e3:50:68:e1:40:de:f4:8b:40:c8:
8b:f9:28:1b:0e:cf:a1:ed:a4:cd:9e:74:57:3e:ab:a6:c0:c2:
94:36:35:f1:c7:10:65:ce:00:ea:2e:80:37:35:ff:22:16:2c:
34:df:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:25 2025 by rpki-client