Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa
File: a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa (raw, json)
Hash identifier: vmCAEf1Ww9pCUHP/qfTxMfONEcsk5Wc8vUY8aGtujlc=
Subject key identifier: 9C:49:91:DB:36:B0:92:AF:1A:ED:83:D1:E1:8E:F8:9C:03:00:4C:5A
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858481C9A8AC9A85CB28CE1186F60
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 31713
IP address blocks: 209.9.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8a:c9:a8:5c:b2:8c:e1:18:6f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=8f11d40b-b6af-435d-8955-d8eec00d629e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:70:f5:cf:2d:7f:74:c0:7f:9e:bd:da:48:
01:f4:4d:68:04:e5:f0:5e:cf:da:63:71:5a:6d:fa:
20:7c:86:0a:90:50:eb:54:57:12:81:db:37:b1:17:
c1:c9:70:89:a0:e5:19:b5:50:3a:1a:fc:c5:e6:b0:
05:28:90:31:09:52:86:a0:83:63:1b:fd:47:fe:65:
36:02:5d:01:8b:48:cc:53:4a:5a:80:d0:42:0b:db:
ed:df:02:94:b3:f0:4a:63:5f:90:6a:68:5f:e1:be:
21:6f:da:6d:6d:c7:a5:dd:3c:84:17:30:4f:30:13:
82:94:77:5f:68:56:7d:43:6f:d7:99:f1:04:f0:ae:
98:6c:80:f6:43:71:91:ad:aa:0a:71:99:3e:6f:40:
5a:0c:cb:59:31:78:71:b9:77:c6:82:f6:53:6c:dd:
d3:d9:de:d9:9f:fa:1d:e6:0d:a8:2f:f9:9a:57:5e:
d3:f9:a6:51:78:f0:c3:60:cd:c8:95:34:07:fd:ac:
ed:57:f2:c6:de:ba:a3:69:f4:cf:82:7e:a0:ed:62:
44:d9:38:4d:a5:78:ec:29:3d:8a:72:63:5e:66:d5:
79:2e:28:f4:b1:05:5b:27:cb:a6:98:d3:c3:42:3c:
8b:00:70:12:15:80:80:b1:c6:b3:80:69:f9:46:2e:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:91:DB:36:B0:92:AF:1A:ED:83:D1:E1:8E:F8:9C:03:00:4C:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:e8:5c:10:03:66:01:32:1b:24:3a:58:4d:03:29:04:66:27:
e3:a3:c8:04:4b:83:1a:ae:7d:b3:da:7a:6c:b6:4f:4b:8c:17:
2d:29:1e:1e:19:5e:3b:c2:27:7c:2b:ee:6e:c3:33:13:03:f2:
d7:01:e1:02:f8:3d:ef:15:40:2a:78:fa:a7:35:f3:fe:4e:7c:
25:c0:3b:c2:56:c4:ff:b5:6a:1e:b6:2e:44:91:4f:75:7a:55:
40:54:a9:bd:23:2a:91:89:21:65:66:bd:b7:36:ef:75:bb:9b:
7a:28:4d:fc:75:da:ed:39:b3:9c:cb:8a:e0:9a:75:83:3a:1e:
24:bd:e3:a1:cf:45:73:35:da:2f:56:a9:ad:96:50:7f:ea:42:
e9:be:ca:37:1b:91:d6:35:b2:c2:f6:de:42:7b:f8:0c:96:a9:
8c:c5:11:a0:cd:83:e4:35:7e:45:b4:7d:ee:de:b0:5e:a4:dd:
7c:41:02:8c:b6:7d:8b:d8:62:cd:f8:a4:65:ec:a4:57:e0:41:
86:b5:ae:2b:04:0b:6c:f0:ad:ea:a0:cc:eb:9b:b6:72:31:c2:
14:cc:9c:4b:f7:64:bc:37:c1:ee:53:1a:37:e3:8d:93:f9:00:
4a:9b:ca:48:e8:c0:83:84:81:d0:a2:b1:18:c1:7d:25:76:90:
a6:74:d6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:05 2025 by rpki-client