Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa
File: 89bdd6d3-2f08-3833-852b-2137080307ad.roa (raw, json)
Hash identifier: vOeH+N439/hqqTCslC2VYJ27P/VFirYR/Et/RU24Ppc=
Subject key identifier: EC:72:1F:F1:96:B0:E6:A7:48:4B:B5:F7:B3:C7:84:1F:7C:B4:70:21
Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial: 010D0C9F432858480BDA7C53E71B1943F140FC40
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 209.169.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:7c:53:e7:1b:19:43:f1:40:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=da206165-89b1-459b-95fa-fb2f0f4a85e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:d2:18:8f:7d:7a:b2:c0:75:ae:fc:45:ab:
6d:8d:32:66:8a:4f:3d:de:48:5c:8a:78:d5:73:b0:
af:53:b3:e5:be:bb:42:2b:52:8a:fe:55:c5:11:f0:
8b:d4:5c:ad:59:0a:39:7f:32:3b:0f:2b:6d:e2:18:
0b:37:e8:02:b2:f3:04:21:31:78:f3:0d:4b:ba:e5:
02:f6:0e:5e:6a:32:a3:2c:09:75:d7:91:c4:c9:42:
12:b0:05:a8:b2:18:fb:d7:eb:d7:8d:eb:54:69:18:
40:ec:5e:84:c9:09:f1:8f:df:d6:4b:29:34:d4:a7:
35:4e:5e:3b:eb:f2:13:8f:ae:64:44:e7:2e:e3:75:
9f:47:b2:0c:58:2c:eb:d0:53:2d:0b:20:07:a1:dd:
ca:6a:7c:d7:54:86:ac:7b:70:e8:b7:98:e8:cc:b7:
95:87:d3:36:06:0a:5b:a9:4d:d0:80:53:5c:35:65:
c6:be:b2:89:b2:b8:5c:a3:a5:68:d8:21:33:cd:3c:
18:0a:c0:97:54:bd:56:d9:09:ab:c5:59:5b:62:20:
06:7b:57:52:ad:dc:55:63:dd:1f:9f:57:a1:4a:a0:
42:aa:0f:d1:c7:41:5c:fd:da:00:70:8c:10:e4:91:
f5:23:09:a5:48:b9:c9:a9:ec:f0:02:97:90:a7:0c:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:72:1F:F1:96:B0:E6:A7:48:4B:B5:F7:B3:C7:84:1F:7C:B4:70:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
X509v3 Authority Key Identifier:
keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:7e:d2:fb:9a:b2:e8:b7:45:67:88:50:ab:a1:a1:d9:8d:a8:
1f:0e:e0:a1:2f:f1:11:5a:e7:9b:48:2f:f2:f1:63:16:b9:83:
56:06:94:5c:38:ca:97:71:6f:ee:fe:8f:58:a0:1b:01:f3:80:
24:5f:36:39:73:ba:f3:0e:97:91:0c:0d:90:5b:fb:65:84:d2:
d1:8d:31:d5:0f:39:90:32:28:e5:7f:8e:1a:c1:a4:39:f6:dc:
f2:c8:0b:8d:19:6b:f3:f2:85:c1:fd:e5:9d:a6:e6:b3:43:16:
84:b1:f3:e0:16:21:0c:f0:5c:c9:5c:f2:47:0a:97:d2:f8:7a:
f5:34:be:23:42:73:d2:37:b6:8e:42:bb:68:84:c9:fb:ed:00:
93:7e:e5:6f:d7:41:12:78:39:99:e1:f4:ca:61:da:5a:a5:05:
e6:07:9f:3b:82:45:9e:96:61:e2:6d:5a:4d:6d:dc:78:9b:de:
c2:d8:2d:5c:0e:d1:b8:55:dc:f2:cb:e2:81:37:24:00:e8:e8:
73:ea:ec:85:50:ba:62:c9:b3:54:ad:a8:c8:90:7f:2a:ed:89:
bf:32:74:bc:dc:c6:b2:a3:d7:99:9e:75:80:a0:46:40:4c:b7:
f7:e9:8d:65:3b:0e:77:b3:15:06:eb:68:e3:3c:35:f5:c5:77:
0c:8f:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:19 2025 by rpki-client