Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa
File: 7675d262-4d44-3834-ab36-7be25716a0e4.roa (raw, json)
Hash identifier: F47ROq+W+KC5yj59HVziZGOBXt/dVcoitIXfsZl9Hns=
Subject key identifier: 1B:C2:99:00:2B:C2:6C:DB:74:AF:29:1D:DD:BB:C8:3C:53:9D:94:3E
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848143A7C608302B2DC8A19DD60
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 54994
IP address blocks: 209.9.208.0/24 maxlen: 24
209.9.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7c:60:83:02:b2:dc:8a:19:dd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8a8007fd-cddc-45dc-89b0-7b4d1b474af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d0:52:12:8e:5e:3a:35:e6:2a:bd:0c:cb:fd:
38:29:eb:06:41:37:2c:e2:f6:3b:49:29:a4:17:ae:
ee:19:59:3c:56:ad:6f:7f:d6:fd:68:16:96:b2:01:
cf:2d:39:d4:91:97:db:7f:df:89:45:dc:73:6a:72:
03:bd:2d:4a:7a:3b:2e:a3:bb:a0:6a:0f:7d:76:52:
f7:4e:20:52:67:5f:27:95:cd:c6:cb:aa:6b:f3:5f:
5b:87:aa:15:ce:bd:7a:ae:e1:43:0f:f1:fb:9f:17:
45:1b:36:6b:c6:f0:05:95:85:b1:84:70:40:ed:24:
d8:51:64:85:45:5b:c8:09:d0:bf:3a:55:8b:5d:5b:
4e:d3:10:fe:64:bc:b4:51:ba:bf:b8:d9:33:b9:49:
09:fc:33:89:fa:70:5f:d8:be:04:a2:0d:93:f4:a8:
9f:2b:8b:20:41:2e:80:cd:08:2f:20:3c:32:2d:51:
ea:fb:70:a1:9a:6e:67:b8:4a:d9:0b:a2:fe:53:50:
5d:e1:91:9c:44:72:d5:ac:e6:6f:48:b4:ce:cf:c0:
20:bf:b5:e4:34:5d:6e:19:6f:fb:b9:a5:c6:bd:50:
bd:d2:81:66:74:f9:4f:50:8a:b8:9d:a2:e6:66:47:
d5:06:83:9e:1c:40:61:08:79:14:5b:b8:6d:33:0b:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:99:00:2B:C2:6C:DB:74:AF:29:1D:DD:BB:C8:3C:53:9D:94:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7675d262-4d44-3834-ab36-7be25716a0e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:2d:76:22:0e:89:42:80:35:3d:73:d2:ed:47:d3:d8:fa:2a:
cf:05:d1:d0:7c:9e:ce:fe:34:26:5c:ac:55:8f:b7:9a:b8:0c:
fc:0a:00:a1:cb:f4:22:49:ad:6e:18:81:27:74:9d:81:37:82:
32:a7:45:f8:93:67:b6:62:72:d9:31:a5:9a:f9:61:77:5a:a1:
14:33:e0:fd:e6:3e:e3:1c:95:b3:41:73:3c:59:c3:06:37:d3:
81:35:7e:dc:a5:23:eb:22:c5:5b:b1:ae:6d:fa:08:23:d8:1c:
c4:df:20:19:bd:3b:2b:b6:e2:6f:6a:9e:d3:41:c8:ba:56:1b:
d6:8c:58:f6:e1:78:1f:03:53:d7:fc:d1:37:d4:6d:a4:46:6b:
af:e8:aa:0f:59:18:41:a6:f9:cd:46:bc:54:78:0a:18:80:8a:
e1:f5:1e:03:4f:94:9c:ca:34:b3:a7:17:0b:bd:63:f5:4e:5b:
b4:70:f3:da:0e:ab:4d:45:aa:da:20:8d:31:75:91:08:2e:df:
cf:7b:11:b8:7c:56:cb:0b:dd:3d:b6:db:0c:d9:cf:b6:ae:62:
3a:fd:58:ca:6d:09:78:e1:43:60:eb:2d:1f:47:cd:be:31:50:
db:ae:a7:a3:14:d4:e1:72:4a:a0:c1:d4:f4:d3:3a:a8:3a:ed:
27:15:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:51 2025 by rpki-client