Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa
File: f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa (raw, json)
Hash identifier: OUmcbr1il0n7MUFy8T3LK1gkGyxCt55WWt5bAREe0ZQ=
Subject key identifier: 61:DE:6A:93:B2:72:E9:17:72:26:62:80:9E:36:8C:9E:12:A0:81:9B
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848159FE8B4F0CD079E0F411D80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 6597
IP address blocks: 209.8.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e8:b4:f0:cd:07:9e:0f:41:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=0771b408-b05b-4a74-9052-29225cb4e465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:cb:91:19:e0:0d:71:e9:09:57:a1:92:0e:
c6:fa:7a:c2:be:3b:a1:61:07:5a:08:84:ee:b6:6f:
5f:1e:6a:fe:84:7a:02:cf:62:48:17:85:05:37:4a:
68:60:c6:c6:cf:fd:29:57:cc:1a:00:f5:3e:07:12:
a0:f1:5d:dd:16:3e:a3:74:d5:45:d4:fd:e9:24:fd:
53:d5:e2:1f:39:90:36:7d:52:62:1d:34:dc:1e:34:
40:5a:94:e7:7f:8e:e3:0b:8d:f5:90:15:31:c8:fc:
41:7c:fa:e9:54:8e:c2:43:f2:d4:10:92:be:40:65:
1f:da:2c:08:4c:16:ef:6b:e7:7e:6d:5c:0b:61:f6:
4b:36:91:68:94:f2:e6:6b:0a:35:1b:59:63:ac:01:
9c:37:07:fb:e4:49:58:33:5c:e1:93:f1:78:c9:cd:
a2:03:40:6e:1b:75:e8:a1:2d:61:2d:ca:3d:92:3c:
27:a1:71:98:9c:eb:b1:50:37:af:cd:f9:88:70:c9:
15:69:e4:d8:c9:0a:2d:76:e0:11:e8:da:d0:89:d2:
d7:86:5a:4a:bc:75:b0:98:67:01:c4:de:17:03:ce:
ac:bc:4b:ab:51:a8:ae:45:e6:63:c7:36:11:1a:08:
54:7d:05:82:c7:a1:49:33:e5:aa:70:56:d1:b9:80:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DE:6A:93:B2:72:E9:17:72:26:62:80:9E:36:8C:9E:12:A0:81:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.8.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:0f:21:35:5b:0c:4c:01:25:7d:0f:a5:79:d8:a0:96:aa:27:
6e:e0:89:2c:2f:10:f6:10:f0:08:a1:7c:5d:33:eb:e0:e2:c3:
7a:ce:f6:cc:33:9f:3d:2f:0e:bc:93:e0:fa:95:24:7c:15:90:
9d:57:7b:05:e6:48:17:0e:53:48:df:9e:c4:ae:e6:0e:3e:60:
ba:98:3c:15:0c:b5:8d:5b:7c:ee:1a:ed:fc:d0:c8:07:65:ac:
5c:69:6d:b0:54:8c:22:04:08:6f:be:50:17:f2:55:2d:21:f9:
78:03:e3:66:07:73:ea:25:e0:8a:4c:ce:9e:18:89:ef:16:8c:
8f:7d:ae:0e:a2:e0:bf:58:df:b0:66:32:5e:d7:30:a5:1e:e3:
fb:de:88:88:f4:e8:0e:bd:a8:9f:e3:63:9c:7c:91:6d:91:e6:
76:7f:a2:d9:b2:42:94:96:cc:4b:e5:8b:42:1f:00:7a:f1:96:
7e:1d:8c:f2:fc:8a:4c:78:8a:19:5a:dc:91:55:7f:e1:57:75:
8f:c3:26:21:11:57:42:be:d7:ef:03:f1:f2:2b:15:dd:89:74:
5d:5f:e8:ea:ba:74:51:96:98:aa:6c:a6:d5:39:7a:e5:7e:df:
4a:51:43:36:16:54:6b:dd:6b:04:18:76:50:74:f4:4b:a2:df:
57:63:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:23 2025 by rpki-client