Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2c9974af-b158-3f00-9524-929bb28e921e.roa
File: 2c9974af-b158-3f00-9524-929bb28e921e.roa (raw, json)
Hash identifier: BCN5XQtC/L8TVf27OkjqvaVJbUsZ+hGnBb45WYNQBno=
Subject key identifier: 1F:8B:69:19:89:7D:01:18:8C:8B:25:6D:15:EA:51:C1:48:5C:A6:51
Certificate issuer: /CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Certificate serial: 010D0C9F432858487325B2120177E90AF81BAD80
Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2c9974af-b158-3f00-9524-929bb28e921e.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 16509
IP address blocks: 209.126.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b2:12:01:77:e9:0a:f8:1b:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=98b9672e-fc42-4a8d-a08d-283e502188a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:e0:34:29:1e:44:78:25:13:81:69:b5:0a:
e7:50:38:15:0d:2e:33:1b:88:49:3e:e7:02:43:46:
9d:4d:48:43:8a:ca:d8:18:47:5c:f0:db:53:22:a4:
ed:cb:8c:c0:82:4a:6d:e2:e5:c6:e1:e9:b7:cd:ca:
6d:0c:ca:4b:31:cb:ca:ec:7c:ab:4f:40:46:aa:ae:
1b:c9:2f:b5:57:2e:ce:07:c5:04:c6:a2:21:9e:9e:
3a:b3:3f:6a:90:2a:e9:13:2c:d8:28:b6:56:00:82:
e7:8c:20:8f:d3:6a:a9:de:33:1d:af:f3:1b:81:e1:
5f:9f:66:f5:e4:62:04:b8:f4:62:94:21:4a:24:c0:
86:11:0a:de:35:6d:a8:ab:90:e5:f3:60:85:f4:94:
95:bd:10:cf:4c:b3:eb:fa:d1:78:62:a2:ea:b5:43:
96:46:d8:3d:79:e0:fb:01:1b:42:fa:45:75:19:55:
e4:64:03:aa:31:ed:59:7e:6f:54:04:e4:72:1e:6d:
42:d4:90:ef:0b:c4:d9:a8:7b:86:41:59:20:bb:9a:
9f:0f:9e:27:f2:10:cd:b6:be:e7:43:28:84:b5:a2:
2f:4c:2f:4b:0a:a5:7a:c2:a6:40:d5:f7:d0:35:fa:
83:9c:cb:f9:fc:79:0d:85:2e:01:9e:bd:dd:f7:f5:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8B:69:19:89:7D:01:18:8C:8B:25:6D:15:EA:51:C1:48:5C:A6:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2c9974af-b158-3f00-9524-929bb28e921e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl
X509v3 Authority Key Identifier:
keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.126.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:0b:1c:0e:33:64:c3:42:cd:e8:e6:c2:7f:2b:ee:d8:c3:ac:
43:59:14:6b:5e:16:e7:83:08:c3:83:ce:b8:d9:fd:96:f1:99:
98:72:4d:04:17:1c:89:9a:93:33:85:3c:c8:7d:37:3e:8e:ac:
39:2f:2c:24:53:fa:0f:4b:87:5b:25:3c:4f:0e:4f:54:dc:65:
b9:b7:3a:25:37:15:4c:d7:22:95:c7:0b:f3:4e:84:73:5b:15:
77:3d:e0:ac:30:32:d7:96:01:3c:bf:af:6c:76:ff:5e:fe:18:
c2:69:ca:64:65:90:cd:cf:3d:67:c7:74:65:52:94:49:0b:eb:
0b:6c:38:87:6b:c2:3a:5f:27:bd:60:cc:ab:7c:21:43:df:28:
70:07:b3:12:a0:fa:cf:65:49:8c:bb:51:ce:cb:e9:d6:b3:f0:
d8:76:e9:39:55:59:a7:05:2f:42:22:d7:b9:d4:d5:5d:06:40:
fd:a6:50:46:c0:9a:75:74:45:f9:00:be:08:c6:70:af:c6:d5:
9a:4a:dc:07:c8:46:5f:6b:25:a2:3d:be:f6:49:d1:11:68:21:
20:d2:f5:8d:0a:58:6b:8a:29:ce:98:34:b0:5d:e5:81:a6:6d:
f0:37:67:b8:21:57:fb:5f:52:c4:f6:18:1c:5b:e0:c5:81:3a:
1f:08:7d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:10 2025 by rpki-client