Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa
File: 1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa (raw, json)
Hash identifier: IjeYICqZe97bUzFWmjPx/bIP/djjj82Cl8pDLthgaQ0=
Subject key identifier: 69:F9:7C:6A:CB:DA:33:F8:9E:A5:03:D1:73:91:F0:7B:02:66:D0:31
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848143A7E5940C7EB35B12C4E80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 20940
IP address blocks: 209.8.112.0/24 maxlen: 24
209.8.115.0/24 maxlen: 24
209.8.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7e:59:40:c7:eb:35:b1:2c:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2f5b7f14-a500-456e-b2ef-eef741c13434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:2a:58:c9:31:84:4c:56:e1:68:11:08:93:
cb:e8:e4:72:a0:7c:dc:97:ea:d0:22:7d:b3:14:6b:
26:98:a8:a0:3f:98:b8:66:2e:94:96:ab:49:5e:7a:
ce:4e:9b:5c:ae:52:7b:bd:61:f4:6c:68:06:13:e0:
30:40:75:92:be:16:4b:7c:f0:6e:34:72:4e:e8:bc:
ea:15:75:87:18:fd:c5:22:03:57:75:78:f6:d5:f6:
c0:41:30:20:f8:fd:aa:a7:05:12:05:78:08:bf:3e:
c0:ac:1c:06:8a:f6:d9:2b:d2:16:eb:1c:46:ec:e0:
71:f5:14:2b:a4:4f:3e:16:99:e6:41:57:78:0b:68:
02:b7:66:95:63:e6:2e:13:98:85:05:87:6f:7d:57:
6c:db:77:62:41:36:e7:96:48:da:68:a9:89:e2:2c:
63:01:36:d3:66:75:c9:a4:f2:64:75:cc:f9:f7:53:
ca:45:94:6b:a5:6f:2c:49:a3:5c:7b:7b:0f:c1:b2:
3f:34:50:d9:70:1d:73:2c:c0:36:58:f6:ad:e5:65:
ba:a9:aa:bc:50:db:92:bf:68:c5:5a:f7:56:92:cb:
c9:71:e1:b9:da:1d:f8:ef:1a:91:eb:97:24:1e:7a:
9b:77:37:c7:7f:b6:79:74:4b:b1:e7:82:06:a0:b0:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F9:7C:6A:CB:DA:33:F8:9E:A5:03:D1:73:91:F0:7B:02:66:D0:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.8.112.0/24
209.8.115.0/24
209.8.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:be:cf:6d:7a:04:03:7f:47:56:f7:d2:10:64:50:97:5d:b2:
9d:a9:5e:76:5d:11:cb:59:ce:d4:e2:47:43:4c:f2:56:93:2d:
46:40:02:a2:66:4d:e9:f2:fa:81:ab:c3:eb:f3:ac:8c:97:0b:
92:7e:f1:2c:f4:df:d2:a7:ae:c3:44:f8:de:20:89:e6:cc:52:
e7:23:d3:8b:16:b8:30:47:b3:a9:ca:94:91:8a:1a:3f:22:4f:
e6:56:7f:18:79:de:57:d3:fd:7f:ee:5e:64:19:45:a4:2a:ee:
62:28:59:c2:d4:82:1b:0a:97:fb:84:65:4e:99:9a:01:68:d4:
0e:53:99:9c:e4:b5:ef:62:1d:25:fa:69:fc:6d:4d:c8:fd:6b:
06:42:ef:1a:28:bb:79:44:ce:e8:c5:e8:19:27:9b:c1:f1:84:
7e:d0:08:22:6b:90:10:9a:14:1f:02:5a:e7:9c:1a:6b:1d:c3:
9b:59:04:41:c4:e8:d9:71:19:a1:c9:5e:00:c1:bb:cc:32:79:
00:92:69:45:44:02:19:ef:cf:15:35:ec:83:f5:27:dc:05:24:
e7:62:f2:c7:2f:53:6c:37:41:49:11:8e:5c:ce:97:66:25:3c:
d1:8d:0a:82:aa:6a:7e:9f:49:62:4c:ed:da:5e:7e:06:3f:1b:
8a:31:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:19 2025 by rpki-client