Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa
File: 3f25dc22-4324-3ff6-8187-5d46925cf83a.roa (raw, json)
Hash identifier: yauHf1M4qmA/atwzLsEMx7uJh+WODJhA2WL6LaL8bZY=
Subject key identifier: DF:7F:A5:B2:B7:4C:80:8D:CC:4B:9A:EB:09:9C:4C:3D:00:77:31:B0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00F62E5E9C18D9DFB5B20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397219
IP address blocks: 209.173.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:0f:62:e5:e9:c1:8d:9d:fb:5b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=45a13181-8621-4a5f-b539-36fb18698fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:30:7e:61:03:81:8a:2b:9a:55:2d:8c:2a:
9a:b7:c2:c5:5e:12:3b:11:1f:be:7f:c1:1a:03:f2:
e4:9c:85:70:b7:7b:43:ad:eb:80:26:e7:b6:92:06:
77:d8:8e:c5:5f:cb:32:15:be:72:d4:47:ec:49:99:
3a:50:dc:8a:78:d3:a8:42:bc:ad:47:c3:5d:9c:c0:
7b:fe:c7:4a:04:a9:0f:e9:a0:33:00:a3:66:4a:09:
61:52:44:f7:f9:8b:76:e2:3b:0c:91:6c:98:39:78:
30:15:33:b1:cd:a5:32:72:ca:6e:64:bf:38:3c:39:
d3:e7:03:62:0d:7a:ee:2a:9a:ec:92:77:af:7a:ad:
38:4e:5d:21:c2:a9:9e:ae:20:d5:31:99:5a:97:95:
8d:8c:6d:99:fc:24:ec:d7:28:46:1f:0c:00:06:56:
8c:78:e0:7c:7f:9b:15:a4:85:ba:26:25:b0:32:ff:
53:39:7e:63:2e:89:97:53:0e:22:d6:e1:0b:be:92:
0f:b0:70:6f:34:9b:ab:5e:51:7e:ed:ab:b1:b9:60:
39:bd:c8:0a:50:74:70:03:3c:53:28:8e:60:ea:25:
09:a2:91:0f:4f:c0:7a:b4:40:6d:5b:c0:03:51:f0:
96:6b:4b:52:64:88:13:3a:e4:cd:5c:03:a7:34:9b:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7F:A5:B2:B7:4C:80:8D:CC:4B:9A:EB:09:9C:4C:3D:00:77:31:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f25dc22-4324-3ff6-8187-5d46925cf83a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
209.173.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:e8:88:c7:59:34:08:02:1b:0c:21:91:5d:0d:30:14:19:d0:
f8:03:2f:27:62:37:91:84:2d:88:ef:ed:37:23:ac:69:48:c1:
19:9b:40:be:60:91:54:ac:a5:9e:2d:02:b1:41:ed:73:ba:55:
83:83:54:d1:a2:76:41:44:db:1a:da:9b:b2:93:9a:d0:fc:b1:
25:73:d1:83:fe:6d:e3:c4:8b:5d:c7:d8:c1:52:ef:91:a4:73:
d2:08:76:e1:7e:4f:75:29:83:66:43:4b:ac:1c:b1:d3:b2:ed:
12:5c:b8:ef:da:12:ba:b3:08:81:1e:30:88:ec:35:dd:59:37:
08:66:c6:b2:aa:5e:cf:35:fa:54:48:42:19:b9:ff:60:79:12:
7a:f9:d3:89:d7:c5:f5:64:fe:c8:fa:1c:c0:be:77:cf:b6:ab:
3a:ea:3b:65:a4:01:63:19:ba:c2:a2:50:ce:35:78:fe:ab:8b:
00:67:ab:6e:a5:bb:25:d8:34:e5:6c:29:59:68:68:6a:01:4d:
a7:db:bf:8b:76:df:45:99:3f:0d:ae:39:cc:50:da:d2:a3:e2:
a8:2a:a7:35:6b:a3:43:2c:f8:a3:d1:2d:85:df:30:55:93:ca:
84:c0:4f:8c:f3:ea:19:53:93:e7:61:51:fb:3f:74:52:c7:1e:
be:4c:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:38:55 2025 by rpki-client