Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa
File: 40a445a0-c71d-3db6-9909-8be2612ff8f9.roa (raw, json)
Hash identifier: Rbusit4f29FLwq8v17qzkxhkeOP8ManqHd0ctxiKctA=
Subject key identifier: 7A:8D:99:62:6B:09:0D:65:21:0A:53:B6:77:DB:A2:79:11:7F:21:C4
Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial: 010D0C9F43285848090FBD3BE44CE20A78104560
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 209.114.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:bd:3b:e4:4c:e2:0a:78:10:45:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=1d2ad5b1-f973-42b3-b067-688de511183f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:c3:6b:96:9c:3e:42:18:01:f0:73:0d:bb:
dd:1b:d0:cb:b6:78:42:f8:cd:39:5b:fa:e6:91:88:
5a:bd:81:fd:a9:4d:c8:59:75:25:1a:48:d4:1c:14:
14:dc:dc:63:db:e0:a4:a7:fe:b5:1b:42:74:b9:23:
38:9a:1c:4e:06:a0:c4:41:4f:88:7a:b0:48:39:01:
09:58:e3:a8:e1:18:78:21:b6:61:c6:7e:6d:47:64:
42:c9:c0:92:e9:94:0d:30:ed:f7:a8:af:60:8b:85:
89:70:94:7a:8c:dc:c4:bf:8a:ce:70:8e:00:10:97:
51:3c:1d:b2:89:0f:30:39:f4:58:82:35:3c:4d:59:
f3:07:6e:40:5d:fa:15:22:d7:ff:63:8d:af:ec:95:
55:e4:4b:7b:cf:e6:5e:73:40:51:23:fb:2d:d6:8c:
2d:d2:9e:2c:04:aa:a2:ef:e2:4a:24:d8:02:08:e5:
1c:aa:0f:03:dd:78:08:43:f6:8b:b7:c7:80:99:1d:
36:43:3a:0e:78:9d:51:0e:1a:05:e1:e3:82:ae:bd:
2b:e3:95:0e:4c:36:34:cb:ae:1b:d3:cf:a0:ad:4c:
c2:6e:1f:45:42:ab:4e:62:5a:fa:b4:16:d8:7c:a3:
ed:e9:00:cd:31:fb:df:1f:5f:a0:73:8e:c0:77:01:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:99:62:6B:09:0D:65:21:0A:53:B6:77:DB:A2:79:11:7F:21:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
X509v3 Authority Key Identifier:
keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.114.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:05:27:d6:85:8b:3e:75:84:a6:b3:dc:d5:4c:62:41:a8:17:
18:ba:dc:94:03:b1:82:2b:ce:9d:c2:ca:02:42:74:e1:74:4c:
47:c3:8c:bb:ae:39:c4:47:1c:54:a3:2e:57:aa:40:5f:3a:80:
b1:04:1c:ea:50:a7:d6:cf:a4:34:72:1d:2c:84:7f:5a:b9:a5:
4a:0e:9c:3d:d7:8c:ee:a5:59:63:28:fa:da:92:2c:87:54:da:
32:b7:32:f1:d7:6c:d4:ed:86:7b:54:b5:98:dd:41:ab:20:84:
c1:f7:64:cd:fb:17:b0:09:ac:42:0e:b2:5f:d8:16:d8:90:12:
2d:2e:93:be:c0:4e:3c:e2:88:79:ea:76:38:91:a2:3b:9e:76:
12:f8:8e:68:c7:a0:bc:c6:5e:67:98:ca:2c:15:ef:60:68:68:
a6:52:71:09:03:b3:8e:c8:86:95:d0:84:7e:36:97:78:17:4c:
82:4d:d1:49:b5:37:c5:ee:e7:75:21:eb:8b:09:f4:00:c7:44:
e8:09:fd:e2:d7:5a:32:5c:40:57:13:8e:05:20:70:33:5e:99:
0a:6f:e6:a4:cc:da:20:b5:0c:db:00:7d:ed:ac:67:31:8c:df:
73:10:df:91:1c:84:36:05:80:bb:4d:c0:5f:05:5f:e1:79:a1:
0b:17:4b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:07 2025 by rpki-client