Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa
File: e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa (raw, json)
Hash identifier: Idj1gxeR8fuJhAhE/YVa/GVb1DXuHRo4LGnWlmMiDmw=
Subject key identifier: 36:DC:A6:81:F3:81:F3:6B:E1:ED:AB:A7:8D:6C:98:88:DF:F6:63:60
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848159FEC30258DC62FBEFEF880
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 3491
IP address blocks: 209.8.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ec:30:25:8d:c6:2f:be:fe:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=06387b69-806f-4db9-b7aa-9a4ca606f45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:66:76:24:f3:8a:d7:91:4f:43:3b:25:d7:
c2:76:b4:4a:78:5e:23:96:da:e1:2f:2d:8d:c4:0a:
8f:3e:93:d2:75:81:f5:05:09:25:6f:2d:56:91:84:
c9:05:6a:58:9a:1d:52:5d:29:7c:9d:66:a2:f4:61:
31:ac:63:52:97:46:ed:b9:fe:b9:43:47:07:f1:e7:
46:12:81:a4:f4:74:36:f6:fb:26:f2:81:f9:6f:31:
c1:63:ce:e3:47:a4:de:af:34:e6:dd:17:68:0a:76:
61:5e:27:19:f3:dd:d1:51:e4:59:b0:45:82:16:57:
4c:26:a6:a3:60:13:f2:85:f5:37:f8:51:95:0d:06:
6e:3f:cb:c7:db:c5:07:0a:85:76:cb:36:be:43:a1:
d7:34:fc:54:49:f4:0f:52:34:0e:62:4a:db:7a:2a:
64:ce:19:f1:bf:ca:35:32:05:06:13:5c:c4:e2:09:
c4:ac:09:64:10:e3:7d:71:68:04:f9:24:db:2f:2e:
3a:b7:0e:e6:7c:cd:18:6c:c7:12:78:e7:75:e2:f4:
fc:cb:e3:75:4d:4a:7d:1b:82:9b:09:99:b1:50:e4:
8c:af:33:ce:98:f7:0d:eb:a6:77:f7:82:07:5a:cd:
06:f3:21:64:f2:92:56:12:0a:40:bc:9b:d9:b5:f9:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DC:A6:81:F3:81:F3:6B:E1:ED:AB:A7:8D:6C:98:88:DF:F6:63:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e956ab43-9912-3ef5-bf74-0b4b4857d0c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.8.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:f3:88:f2:d7:eb:f8:de:0d:bb:0e:2a:f4:d9:10:95:9e:fe:
d8:0d:b3:d0:99:85:13:3c:6d:66:54:8c:81:31:99:fd:3a:b8:
64:34:82:97:79:eb:55:55:fd:d5:52:f4:63:ae:82:65:49:39:
67:b9:88:74:d5:2e:68:9f:53:2b:d3:a1:58:36:37:f4:3c:5e:
f4:25:ea:45:96:9f:65:99:36:74:5c:58:07:34:ca:03:03:cd:
70:b2:3a:b9:4b:91:ff:d4:e4:09:cc:2d:c4:ab:1e:d6:19:b7:
24:4b:de:51:48:56:90:91:24:80:ab:4e:47:9d:c9:cc:22:fb:
76:f9:9d:de:d1:97:32:9e:c8:b8:7d:03:81:59:65:07:8d:69:
9e:cb:0c:da:2d:83:f8:8e:37:79:2f:64:b8:62:ea:46:7b:5b:
01:5e:9a:8e:6b:64:5a:e9:d6:7e:9a:f5:b5:5e:3b:77:1f:95:
85:58:40:8b:f4:f0:99:11:64:c5:58:7a:e6:b6:e3:c0:72:83:
c9:f7:4f:60:a0:4c:66:02:40:1a:4f:32:48:d3:ac:ab:32:9e:
83:2d:04:aa:6f:cc:ee:29:95:7c:68:c2:ca:78:9a:32:9d:0d:
d0:e3:2e:72:e6:7e:34:75:0a:f3:e8:31:de:3e:ad:6d:dc:fd:
26:a0:d3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:21:55 2025 by rpki-client