Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/844b830e-af15-3bd9-a761-f5bf11f43e9d.roa
File: 844b830e-af15-3bd9-a761-f5bf11f43e9d.roa (raw, json)
Hash identifier: Zbr9O8XxS5zfXPS05d/JSsB2WQB5JNeLegflds2iTiQ=
Subject key identifier: DC:8B:AD:79:02:62:70:4E:1E:34:42:DE:45:5E:37:BA:97:35:DB:AA
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848143A7E4BADCC6FA02976A500
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/844b830e-af15-3bd9-a761-f5bf11f43e9d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 18781
IP address blocks: 209.8.27.0/24 maxlen: 24
209.8.75.0/24 maxlen: 24
209.8.76.0/24 maxlen: 24
209.8.187.0/24 maxlen: 24
209.8.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7e:4b:ad:cc:6f:a0:29:76:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=a0de871d-99f8-4502-a3ee-4e65a8c6843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:07:71:a5:ec:19:e7:c9:1e:df:85:7c:50:08:
fa:93:2d:06:0c:7d:d7:10:1b:ac:95:9f:33:a8:19:
2c:ae:23:7e:c2:d9:8a:7b:6c:f3:ea:c6:36:19:a7:
19:c4:17:5a:f4:f5:26:84:0f:f9:33:16:1b:31:c6:
61:68:46:45:da:11:2d:43:d7:52:df:05:78:67:e8:
8d:ab:0f:5e:0a:75:83:e5:bc:ee:51:00:17:d6:c7:
8b:dc:72:4e:10:d0:a5:d8:f1:cc:82:3a:95:15:18:
0f:00:e5:fc:d3:05:d7:c7:df:22:e8:9c:ea:97:69:
bd:2b:bf:53:c1:da:24:6b:d4:4a:e9:bf:62:43:70:
ee:6c:dc:93:2b:14:1e:92:45:71:ad:35:dc:eb:fe:
83:32:28:49:2e:b3:6e:80:90:e9:f1:bb:16:c7:8a:
27:a5:2b:8e:c0:0e:7f:16:e3:1b:21:43:fb:b7:1a:
87:7e:d3:7e:fd:3c:88:a2:a2:63:59:20:df:fd:3c:
5f:28:6c:bc:d3:61:14:13:8d:16:93:a5:6f:5a:84:
05:97:73:1d:83:4e:80:81:e2:55:f1:18:a0:cd:1c:
aa:12:17:7a:2f:cd:d0:4e:c3:0c:bd:69:b7:63:b4:
c1:b8:e3:e7:09:3c:8b:bb:9a:c9:2c:2f:66:31:50:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8B:AD:79:02:62:70:4E:1E:34:42:DE:45:5E:37:BA:97:35:DB:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/844b830e-af15-3bd9-a761-f5bf11f43e9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.8.27.0/24
209.8.75.0-209.8.76.255
209.8.187.0/24
209.8.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:89:f5:2b:d2:3c:97:19:4f:85:37:94:0c:ec:ca:16:22:cb:
b8:61:23:c8:b6:4b:2b:b8:31:63:bd:33:48:73:98:5d:e7:21:
9c:78:dc:84:32:45:34:6d:c2:f7:c7:e5:5a:4d:75:9c:f6:70:
6c:e7:64:ac:4a:ba:18:33:e3:f9:ea:c2:2f:97:49:51:c8:78:
8f:93:7f:a8:05:78:36:c3:05:01:cd:00:71:0a:c3:7f:c6:70:
e2:c0:a1:58:14:2e:b4:10:be:0e:0f:08:d1:39:65:a7:a0:45:
88:18:2f:e6:62:20:42:9a:c2:b7:eb:54:62:73:20:a8:56:8b:
36:61:4c:2e:8c:06:7e:79:cf:63:fb:27:86:24:31:16:7d:2a:
1b:c8:60:7a:c6:b7:d2:e2:ed:01:85:89:68:d1:ea:7b:07:df:
7b:9d:d1:e3:27:75:07:a2:63:b3:91:de:e9:36:fd:1a:cf:cd:
14:7f:3c:c3:86:93:13:01:d8:8f:71:2e:3d:06:90:2b:e5:3a:
74:64:3e:23:4c:af:f0:31:99:e1:c2:33:cb:6b:29:54:0b:69:
4b:00:c3:05:e8:7d:80:d7:de:04:5d:aa:3c:55:00:a7:f8:22:
ab:2f:f8:14:99:98:0c:e5:94:45:b9:fc:21:fd:e8:ea:07:15:
20:12:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:18 2025 by rpki-client