Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1959a70b-1347-34ca-b31a-9a8fc2901198.roa
File: 1959a70b-1347-34ca-b31a-9a8fc2901198.roa (raw, json)
Hash identifier: oZ57RoH7YYHH9/OBJwi/ySuFEW9+6hHCoGVwHfIgXuw=
Subject key identifier: 7C:97:54:36:F5:D4:CD:63:FF:EC:AB:ED:B2:8D:5F:A0:F7:88:1C:A4
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848388557B1B7DC5C30F017B780
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1959a70b-1347-34ca-b31a-9a8fc2901198.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 209.151.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:57:b1:b7:dc:5c:30:f0:17:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=33c55663-3287-45c8-98a6-58f1ef7bc567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:31:f4:9c:2f:45:24:e0:09:ae:c7:38:5a:
45:b9:42:f0:95:87:91:1a:5c:35:28:98:c2:96:b1:
47:78:26:34:33:b9:5f:29:74:a9:95:a8:ec:ed:1e:
a1:68:9a:dd:42:f1:5e:f2:c2:d7:06:5b:8e:f1:b8:
53:84:b2:8e:c4:86:0d:ec:f2:be:74:43:28:b2:22:
fd:a3:31:57:cc:6b:78:ae:14:ac:64:66:1f:2f:82:
be:6c:83:42:6d:c1:b0:7f:92:b2:d0:82:37:dd:e5:
df:42:d0:a1:a5:cc:69:21:3c:d7:8f:28:b8:4e:72:
0e:70:9b:31:c9:0d:49:f9:ff:41:36:b6:03:1e:6a:
76:dc:f4:14:f7:08:f3:6d:40:a2:3a:e7:ca:a2:82:
23:24:55:f1:3c:5d:6b:99:59:51:66:58:25:d2:5d:
db:ff:c7:8e:db:10:1d:9d:a2:ef:26:a6:af:b8:bd:
fe:e2:75:e8:8b:ef:e2:99:b1:05:89:59:fe:7b:e2:
7f:1a:99:ba:7e:9b:68:a9:a6:aa:dd:3b:61:40:c9:
53:98:b8:5b:0c:36:e3:58:a0:e7:4e:0c:10:f8:1d:
ef:07:04:42:71:01:1f:44:f5:fc:ba:fd:5c:c8:8b:
8e:cf:0b:c6:b9:a1:34:bf:5c:51:2e:1a:f2:57:11:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:97:54:36:F5:D4:CD:63:FF:EC:AB:ED:B2:8D:5F:A0:F7:88:1C:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1959a70b-1347-34ca-b31a-9a8fc2901198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:9c:c1:34:3e:da:03:c9:f5:99:d6:d2:6d:4f:0a:b0:87:6b:
5f:22:b6:cb:b6:1b:cc:15:4f:90:79:fa:4f:6b:b2:35:bd:29:
62:b5:02:87:4d:7d:f3:36:e4:e6:33:41:11:aa:45:bf:df:3d:
60:30:9f:48:5e:dd:70:53:64:b4:a4:d9:cc:df:86:0c:f6:1a:
2f:2a:d1:a3:50:83:6e:b6:11:42:d4:8b:ca:25:08:b7:f8:96:
aa:99:eb:a3:91:a7:91:c8:66:22:61:ee:aa:d2:b3:62:73:13:
ca:33:f7:06:9d:3a:a6:0f:94:83:21:0a:5d:08:b9:ad:0a:5e:
66:c3:cb:0f:bc:a0:6e:e5:bc:97:6f:16:64:0a:f4:95:8b:4c:
1a:e6:91:88:6b:78:4d:af:5e:70:7e:d5:0c:cf:9b:28:e6:0e:
86:a4:6c:df:62:e4:de:5d:f4:93:0f:d3:92:76:cf:16:b5:35:
f0:f0:24:04:64:f8:f6:52:0e:b6:8f:df:0b:64:c4:5f:5e:40:
2f:49:40:1c:da:38:ad:e9:b4:86:c6:e3:d7:72:f6:97:7d:11:
cd:9e:dd:cc:f0:6c:b6:dc:1c:be:03:c5:a7:b4:e6:9c:86:a3:
68:ea:20:94:9d:7d:53:5e:6a:90:28:10:27:02:67:e7:73:40:
a6:4b:6f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:57 2025 by rpki-client