Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa
File: 2c199e06-0061-3f8d-8062-186a6d89c327.roa (raw, json)
Hash identifier: c3sgSMAqeDEvusZg+jrIysb5EL7LxYq1VnWgZ+LGlu0=
Subject key identifier: 0A:89:DB:20:44:07:60:E0:18:36:D1:EC:CD:49:CF:46:FE:D5:06:72
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858481C9A8A2BEB59A3B307AB2780
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 17057
IP address blocks: 209.8.5.0/24 maxlen: 24
209.8.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8a:2b:eb:59:a3:b3:07:ab:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=c8783627-b72b-470b-b3db-5bb972f45c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:5b:6e:85:48:bd:9d:e5:a2:1f:5b:ad:52:
3b:8b:bd:b0:b5:0f:a4:8b:5d:1a:bc:46:eb:51:68:
89:51:f0:33:91:b4:3a:b3:52:7b:19:db:2c:af:49:
a4:95:ec:87:05:43:3a:f0:82:11:3f:c3:d1:f7:fd:
56:28:d2:07:93:43:40:ed:ed:7f:8c:3e:3f:25:95:
58:13:d9:e1:9d:1e:1f:e3:48:ca:09:3d:a9:0b:4c:
87:5a:6e:e9:11:57:e7:22:df:f9:1f:a1:0b:42:d1:
60:73:4d:ef:98:a5:b2:31:34:12:d3:4c:3f:7b:80:
bb:ff:c2:6b:1d:2c:46:f7:f7:23:f1:6d:e5:e5:40:
e9:0f:06:10:63:3e:d2:bd:0d:5c:21:07:17:8d:d2:
f2:eb:63:e9:98:88:ba:88:56:e2:34:cf:1a:fd:39:
e6:6d:63:a1:7e:3f:19:cc:2e:59:ec:52:ac:e5:18:
0b:e7:f6:e2:57:0f:72:ae:10:3e:06:17:d8:d1:de:
71:a4:44:58:c1:91:18:c1:d5:08:d3:4e:b1:33:1f:
cb:23:6f:f0:2e:6c:12:a5:26:2a:3b:85:2b:28:0c:
94:34:04:e3:c2:1c:8d:f9:7f:61:23:33:e3:6b:ca:
79:bd:b2:6c:2d:5c:b5:3a:f3:b3:69:8e:d5:14:1a:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:DB:20:44:07:60:E0:18:36:D1:EC:CD:49:CF:46:FE:D5:06:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.8.5.0/24
209.8.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c6:08:ee:ea:20:0e:1e:8f:59:de:44:c5:59:27:69:8e:9e:
b7:53:1c:e3:6b:b9:c1:71:e5:eb:29:1a:65:b4:13:de:12:5e:
5e:17:27:18:4e:21:de:13:f4:c8:0a:f7:4a:86:d7:80:a9:d2:
ff:12:62:be:bc:2b:bf:85:bf:cf:ee:2f:e2:c2:9d:f0:36:91:
6f:37:46:c5:ae:14:39:c0:d4:ab:41:e4:75:39:04:3d:79:1e:
08:ba:bc:57:e9:93:a1:1b:db:c8:18:c0:fd:6d:6d:15:82:4b:
4c:85:66:20:0a:a3:56:af:af:aa:d7:47:71:20:4d:3d:49:8e:
c1:ce:b0:31:b6:d2:5f:49:25:67:a8:b7:97:ab:71:40:e8:1a:
29:0d:b8:82:76:7c:02:4c:a7:68:18:d2:01:fa:7a:76:78:54:
90:64:56:0d:80:3f:53:08:49:fe:ca:2d:b1:7e:82:09:63:6a:
bb:dd:ac:46:70:11:44:3d:31:c3:13:9e:59:01:a9:26:28:2a:
31:8a:25:b2:6b:7d:fe:ee:e6:82:d4:78:69:fa:e7:74:af:f6:
e1:b5:c9:07:20:82:e2:18:a1:18:41:54:7a:16:a5:5a:af:8f:
83:74:cd:53:61:9d:e4:cd:0b:75:56:42:68:3b:42:b4:54:bc:
8f:77:cf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:05:09 2025 by rpki-client