Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa
File: a98302e0-6fdd-34c6-ae18-5ecfece042af.roa (raw, json)
Hash identifier: fln+MfOdVvbF7EZdhUvo3rkOIhLc1as188Kkzr9BmAU=
Subject key identifier: E1:2B:B8:F2:09:F7:56:93:F8:4B:D8:ED:71:D1:10:13:8E:F9:AB:42
Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial: 010D0C9F432858480EA509820B6E41F652E4B5C0
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 7782
IP address blocks: 204.17.139.0/24 maxlen: 24
204.17.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:09:82:0b:6e:41:f6:52:e4:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=a7c0f0cb-45b9-44b1-aab9-016360a9a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:a1:95:a3:2a:13:86:25:f7:87:86:b4:ec:
7d:75:85:0a:ed:74:48:4c:43:30:a2:c7:40:11:50:
b6:b9:24:f6:5c:ef:ef:a8:d7:a0:ce:cf:7a:47:31:
2f:94:d3:95:c0:72:8a:e5:e9:15:02:23:44:1f:06:
f7:52:67:a9:d4:fd:d3:6a:6e:fa:d6:9e:88:41:59:
45:46:e0:39:00:a3:f9:fa:05:98:3b:fe:89:88:b0:
7e:bd:d3:05:11:37:db:8d:ea:5c:c4:29:fa:ae:60:
d3:31:d0:80:9d:61:7c:21:8e:71:1b:c1:24:4e:5c:
c2:6a:fc:82:42:7a:35:0e:07:69:f7:1e:ea:ab:65:
fe:6c:62:48:8d:09:ff:bb:5b:f7:f9:c5:58:8c:cc:
1f:49:8f:36:0d:0d:5a:ca:1c:7a:8f:95:66:2d:7f:
5a:20:19:53:00:6f:b7:1e:af:fb:15:88:7f:de:0f:
9d:d8:10:7f:93:e7:94:98:21:22:b7:e0:01:9f:c4:
47:c4:72:18:06:6c:84:7b:90:21:9f:6e:c8:24:78:
58:d6:c0:48:2f:27:f9:67:57:78:87:b5:87:ef:fd:
f2:88:cd:7e:4f:ee:d2:cb:8b:35:01:04:e4:61:e9:
4f:8f:19:d4:37:91:4e:1c:69:9a:e7:76:68:45:12:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:B8:F2:09:F7:56:93:F8:4B:D8:ED:71:D1:10:13:8E:F9:AB:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
X509v3 Authority Key Identifier:
keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
sbgp-ipAddrBlock: critical
IPv4:
204.17.139.0-204.17.140.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:92:7c:9c:b0:ce:a9:b6:ef:eb:d4:a8:e1:b3:52:65:74:a9:
0a:f0:36:3e:85:53:73:d6:a2:39:0a:66:be:b8:e7:f3:4a:68:
e4:1b:53:30:98:94:6e:35:57:6b:2b:e1:82:19:1e:d5:e1:32:
d4:f2:79:94:76:1e:72:a5:ab:68:1f:8b:f1:fa:6b:b0:e4:29:
21:24:78:9a:3d:50:1f:0c:c6:5f:d3:d1:de:6d:a0:21:28:be:
1e:de:c5:07:11:11:f3:4b:ab:52:31:3b:24:33:fb:1b:f6:22:
c0:b6:8b:97:da:6c:eb:39:9e:54:a7:5d:b0:32:02:8c:54:f2:
2f:9d:e8:5e:32:fa:8f:ae:c4:df:d9:bd:4d:ad:44:d1:c0:2e:
f5:4e:67:2f:14:f7:77:fc:17:ff:d7:ea:7a:6e:ba:9c:b3:21:
ea:f1:f6:e7:3b:65:ea:69:47:c4:91:67:dd:0a:b3:52:08:d1:
4a:23:15:d3:a5:3a:a8:81:32:f4:ee:17:d1:9a:65:4b:7f:72:
a0:0b:25:6d:8f:e2:df:1d:6b:49:a6:55:95:13:aa:c7:eb:84:
18:51:c6:ed:93:99:88:9f:5b:9c:36:89:bc:93:1a:fc:99:d6:
5d:39:0b:29:ff:ff:66:24:23:ab:bd:ac:02:13:8b:90:f1:58:
b5:96:0f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:51 2025 by rpki-client