Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa
File: a502b432-1632-3940-872f-cd24ee7e9163.roa (raw, json)
Hash identifier: 9fnMwZfRO5hylIG/OUHVCX8oH975lpvoTvhtOda+lRY=
Subject key identifier: A5:96:B5:DC:EE:57:A7:3D:C7:B4:D5:98:F2:4B:29:02:97:77:A0:BA
Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial: 010D0C9F43285848854B47F820B912AB16B791C0
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 14369
IP address blocks: 209.173.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:47:f8:20:b9:12:ab:16:b7:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=b4fa32fb-2585-4919-82ea-90ee37f53621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:f9:8c:a0:da:f5:c6:b1:9d:b4:8d:41:ff:
bc:a7:1a:df:f4:c5:57:a5:df:7c:b0:d7:2e:85:b4:
c8:23:6c:52:cb:47:63:72:22:88:6f:18:55:e3:1e:
49:d2:35:1c:b2:fa:b2:0f:eb:bc:a3:77:82:fa:d7:
3a:c1:93:fd:2f:74:fe:99:b5:2c:53:a0:dc:43:bf:
ff:7e:1a:4d:3e:47:14:8d:14:08:c4:68:0d:f7:16:
27:d8:c4:20:74:9b:db:05:20:49:ac:2d:e0:74:c0:
f7:92:4f:7f:69:fc:ba:60:5d:54:f3:ee:e3:88:d1:
5b:28:22:11:1c:4f:bc:8b:97:e3:eb:a1:bb:e0:8c:
74:c2:23:86:37:58:df:c9:74:3b:cd:74:28:fb:68:
5b:1c:2a:cb:0c:40:1d:53:c3:03:6c:e3:17:a0:77:
a0:3f:e1:d6:8f:88:5e:f7:88:ab:4c:ab:21:e0:93:
46:92:c0:b4:20:df:9f:4a:c1:c9:30:7b:7b:3d:1f:
3b:ec:8e:bd:69:36:0f:da:44:3b:ea:de:ac:fd:65:
f2:51:0d:46:77:a0:a8:14:cd:cc:70:e1:0d:db:b1:
0e:89:f5:4b:39:e2:c4:61:9d:7e:df:46:ee:01:6a:
c0:d4:b3:92:d3:66:7d:2d:93:4c:f8:36:f5:b4:81:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:B5:DC:EE:57:A7:3D:C7:B4:D5:98:F2:4B:29:02:97:77:A0:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
X509v3 Authority Key Identifier:
keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
sbgp-ipAddrBlock: critical
IPv4:
209.173.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:d7:17:37:08:98:7d:95:7d:a5:5b:ba:93:c6:cd:9a:f1:1b:
26:5b:de:9b:c2:bf:ec:45:9f:35:6d:dd:41:95:8e:29:d0:52:
38:ab:8d:26:21:af:fe:5e:81:eb:9b:22:a7:5c:a2:5e:a5:19:
1f:c3:c9:e5:07:47:c3:88:b4:38:95:38:fb:90:18:b4:b5:7d:
d6:87:df:39:65:62:c6:c4:43:bc:00:92:e9:ce:8d:37:c5:2b:
9b:6d:a7:9d:32:3d:be:94:e4:4d:fc:d8:56:3f:fb:c7:7c:78:
84:b9:15:ea:0d:f0:ff:fd:f6:cb:cc:0f:4e:3f:84:e5:ca:dc:
b1:48:fa:09:8a:f8:33:69:ac:92:4e:4a:5a:55:c4:c3:63:dc:
d9:57:16:ef:ba:e4:3e:e6:84:60:ca:71:7e:a4:39:ed:3f:ba:
bd:f5:80:8c:e9:a9:19:60:98:53:4e:3a:40:f1:31:07:a5:83:
91:e2:60:e2:62:2b:84:4d:35:d3:14:ea:47:1d:9f:89:2b:10:
d6:47:28:4d:2b:c6:39:d3:a2:69:19:be:ab:d7:28:e0:85:8c:
53:a1:1d:57:0c:b3:ef:ae:69:1a:4d:54:e9:f9:11:e1:fb:c2:
c9:f0:2d:37:54:ca:f2:d7:66:b1:ba:05:e3:33:2d:d2:2c:ad:
3e:36:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:35 2025 by rpki-client