Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f490859e-b723-3417-9ab7-aaa147e99cd1.roa
File: f490859e-b723-3417-9ab7-aaa147e99cd1.roa (raw, json)
Hash identifier: RT9kIj7T+xvCpnSC8Z3E6JI+/q1ZHroxJoUU8li4aQE=
Subject key identifier: E8:40:00:68:4E:86:FA:B5:1C:AB:4B:B0:B3:F8:B4:26:AD:A0:B7:48
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F4328584824FA8B76311824443CB2D360
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f490859e-b723-3417-9ab7-aaa147e99cd1.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 54702
IP address blocks: 209.51.128.0/24 maxlen: 24
209.51.134.0/24 maxlen: 24
209.51.136.0/24 maxlen: 24
209.51.152.0/24 maxlen: 24
209.51.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8b:76:31:18:24:44:3c:b2:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=f21e218b-1773-4c17-aa8b-6b73bd0126d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:35:cb:02:73:b4:2d:a9:89:2b:6b:11:f6:
ad:b0:fc:e0:bd:3c:15:be:9e:a9:75:c8:e8:d5:a3:
91:2e:85:8e:4c:45:ab:83:fd:fa:a7:4f:35:d8:04:
e9:3a:d1:ab:75:b5:15:13:7a:cd:e0:90:47:71:0b:
19:87:20:64:e1:31:93:c7:03:32:3b:b0:63:2d:ad:
50:ce:3a:4b:b0:55:6e:33:ec:15:b1:81:c8:d7:56:
32:1e:2d:8a:94:3a:7f:43:5a:b5:8f:ea:fc:72:f7:
9e:f4:59:a6:48:29:c3:91:1e:54:f7:9a:70:6c:46:
a0:92:44:09:25:78:e6:c1:da:55:10:19:b3:29:12:
ed:da:d4:74:c9:68:c8:b3:d4:1d:04:d9:69:82:19:
18:78:2f:c4:d0:7d:df:8c:1a:c6:72:e4:13:70:40:
61:55:8a:27:46:4d:4b:d8:60:27:75:5d:43:3a:18:
0b:21:bb:80:53:9e:ff:78:e8:eb:b7:59:40:d9:57:
fc:65:b8:fc:93:93:08:ec:dd:96:9b:d0:ea:94:e5:
c8:35:23:c8:ff:f1:22:9c:ba:65:97:9c:7e:db:8f:
28:ae:56:01:92:5b:07:c8:a8:f9:cb:90:ae:42:e8:
e0:1b:79:a9:75:6f:2c:38:49:16:72:47:a4:c5:52:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:40:00:68:4E:86:FA:B5:1C:AB:4B:B0:B3:F8:B4:26:AD:A0:B7:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f490859e-b723-3417-9ab7-aaa147e99cd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.128.0/24
209.51.134.0/24
209.51.136.0/24
209.51.152.0/24
209.51.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:9d:68:b8:90:6e:74:ea:8c:7e:5d:ad:03:2e:c7:21:35:0a:
a8:14:0a:bc:2f:40:08:17:7d:b6:60:db:38:26:c9:83:8d:cd:
85:5f:2e:03:de:9c:b6:82:a7:88:7e:78:1c:7e:56:95:34:60:
13:2d:54:ea:d6:16:bd:55:37:34:37:9c:5f:3a:6a:e3:c0:38:
1c:85:6e:1c:da:a1:82:15:1d:0c:d2:79:c8:59:15:b9:25:bd:
a7:21:08:68:11:09:c5:f2:18:90:10:b6:e6:d2:ea:55:34:de:
7f:08:6b:1e:13:93:3e:3a:67:8e:55:f3:eb:34:a9:5e:a4:4e:
67:19:16:01:19:f5:3b:ec:b8:93:e2:80:79:85:67:21:bf:66:
c2:cf:2c:06:27:1a:2c:38:6b:be:2c:65:ec:70:cc:38:90:90:
bd:20:2a:33:5a:0c:6f:08:33:08:9d:f7:e1:fe:1b:0a:bf:b5:
b1:5e:6e:8b:86:40:6e:16:88:40:af:6e:be:bf:e8:8f:a1:ef:
db:4c:e7:42:a7:33:01:ce:c2:04:5e:08:28:24:71:0e:77:83:
c9:de:1e:cf:02:6d:d0:b9:97:9c:6e:4b:62:a7:45:9b:49:a8:
ee:9f:a8:cc:3b:ed:b6:93:b1:ac:eb:e5:17:0a:5b:83:db:9a:
0a:f9:0f:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 11 09:07:40 2025 by rpki-client