Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa
File: ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa (raw, json)
Hash identifier: S7ep4H63eVsGosFVBn919fpSbKu5NIEtTWI4kj77UN4=
Subject key identifier: F3:1C:1C:4D:DA:4C:3F:EA:C6:1F:5F:0B:51:4D:BE:34:35:CE:0B:82
Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial: 010D0C9F43285848828089C93B606DAD2DDD0300
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 396020
IP address blocks: 209.50.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:89:c9:3b:60:6d:ad:2d:dd:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=a17c2b15-d63a-48fc-9b52-45b2f43eb712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:b2:35:5c:b6:b8:a1:ae:de:ee:b5:ef:42:
0d:ca:0f:7b:91:0c:a2:9b:e1:62:f3:cf:75:cc:08:
b1:2e:9d:77:32:2c:c3:cb:40:aa:9c:a8:0b:b1:12:
0b:5e:ee:f4:c2:d8:1d:6f:86:63:ea:97:1b:3c:3d:
4f:ef:05:52:c7:db:ce:f2:0c:a7:0e:f5:f1:e5:fc:
c0:2b:07:b8:f1:26:6f:5d:d5:c4:10:02:2e:16:1d:
88:35:23:b4:f1:70:fc:42:1f:85:d9:e4:3b:83:05:
fe:26:b8:4d:35:a3:52:ab:da:eb:52:77:af:fd:63:
43:c4:3f:13:86:8b:83:5f:85:10:2d:81:53:b3:2a:
81:89:10:a4:13:43:bc:25:c1:f4:a9:36:87:28:57:
ed:e9:3c:3a:91:3d:78:e6:5e:ca:fc:99:1f:86:6a:
ea:10:6a:07:4f:f1:74:72:08:be:66:db:04:80:8c:
a1:e9:9f:3b:8c:c9:23:94:96:2d:97:50:23:20:6d:
9b:64:d3:b7:94:c9:9c:42:df:70:a6:de:f7:f6:e2:
bf:75:dc:ad:03:ae:de:a8:c1:ca:c0:77:51:62:06:
bf:b9:03:33:c8:32:31:63:74:38:91:57:5d:ef:38:
6d:b7:60:44:39:0f:e5:f3:aa:38:61:fd:9b:71:79:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1C:1C:4D:DA:4C:3F:EA:C6:1F:5F:0B:51:4D:BE:34:35:CE:0B:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ffcc41da-c4ab-302c-b3ee-aa1eb2541ad4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
X509v3 Authority Key Identifier:
keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
sbgp-ipAddrBlock: critical
IPv4:
209.50.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:cc:ff:46:8f:d8:ef:5f:d8:45:be:5e:7b:c1:7d:41:73:65:
e3:70:3a:1d:eb:82:8d:b7:11:99:08:c1:e4:4f:4f:06:18:54:
18:77:88:26:fc:c6:2b:32:da:18:d9:d1:a3:2a:47:21:ac:cb:
f6:5e:ab:88:67:0f:c7:b9:01:d0:de:a8:1b:f3:5b:0a:d6:55:
99:17:b6:ac:ca:12:77:53:d7:e5:19:30:3e:44:ef:ed:36:ae:
a3:1b:6b:cd:9d:dd:34:47:a1:b9:35:79:16:a8:bc:9c:90:07:
26:64:75:3e:74:51:fa:84:24:98:29:96:f8:80:46:fc:08:12:
f0:ff:62:40:71:fb:e7:e1:ce:23:40:4c:3c:c7:bd:d9:26:ff:
07:4d:2f:8c:29:c0:73:bb:7f:0d:05:75:5f:9b:fc:c9:e0:4b:
0a:62:e1:02:40:ad:26:c6:60:dc:2d:74:3b:18:61:17:0d:a0:
a3:08:43:12:be:40:ab:af:7d:a3:20:9d:08:81:f7:6f:26:7f:
50:16:c6:45:7b:99:5b:a2:49:6d:ad:57:66:5d:0f:22:93:98:
86:d7:a5:a6:c2:26:1f:fe:fe:a4:c7:90:52:fc:bd:b6:e5:77:
77:70:d4:39:0a:0b:5c:d5:ec:28:bd:d1:0b:90:a3:fe:66:2f:
02:3f:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:29:57 2025 by rpki-client