Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa
File: 8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa (raw, json)
Hash identifier: z8yJ8OfC8bCgpYC4MLwsK/xGhEIE4pSSYO7gNH+EgHQ=
Subject key identifier: 0B:D3:5F:F8:99:12:3E:82:56:A0:E0:FF:41:AB:93:65:01:E4:F4:4E
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F4328584861004957FCB93BD4B79D5000
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 2152
IP address blocks: 209.129.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:49:57:fc:b9:3b:d4:b7:9d:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=795d34ee-368f-425d-99d4-6a4bc0b95b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:b9:ba:53:80:7e:f9:51:c8:93:07:13:87:
a5:38:56:cf:72:2b:e3:0b:c1:c4:92:77:a4:61:f8:
46:c1:d9:56:5a:e5:c8:f5:f7:9b:2e:26:af:87:22:
ed:93:51:ac:38:e1:d1:34:88:1e:ec:54:ce:8b:8b:
f4:c9:10:66:25:68:07:32:ba:64:b0:bc:fb:83:ee:
08:09:da:e4:1f:6a:d4:12:1e:1d:ee:0e:71:c7:d8:
f0:95:93:a7:b3:8a:86:8b:b1:1d:1f:af:bf:c3:de:
8c:54:88:73:d0:a5:90:88:f1:e1:5b:79:09:8e:e5:
c4:64:1a:13:9d:bb:1f:8c:62:33:e7:bd:72:b9:56:
93:54:7b:93:6f:5a:f4:a4:71:9d:53:de:3f:bc:c0:
3a:c7:a1:92:6c:2a:cb:f0:7e:e6:e3:6a:c3:fa:42:
af:90:f5:35:e1:83:66:41:34:12:34:4b:52:e7:51:
12:93:db:a3:a8:69:20:ad:4e:73:ea:ef:de:8c:11:
4e:62:4f:72:10:e2:1d:7c:b0:cb:c9:79:1e:1b:b3:
c3:0e:55:20:28:12:3a:22:a3:3d:50:25:d0:2f:2d:
cf:f4:d6:06:f6:b9:54:95:6b:d7:9d:e5:36:a3:c0:
7c:02:ea:cd:e8:b2:1b:a7:b2:17:45:41:83:11:ac:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D3:5F:F8:99:12:3E:82:56:A0:E0:FF:41:AB:93:65:01:E4:F4:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
209.129.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:d6:a6:6a:22:03:09:ea:01:a7:f5:df:69:50:d8:96:7c:90:
64:97:85:4f:eb:13:2f:a2:9b:76:b8:54:20:b9:4c:6c:f8:95:
1a:c9:9a:6f:9e:d3:92:4b:f6:05:b1:72:d1:91:47:14:2c:99:
b6:ef:b9:a8:c6:a1:20:36:75:44:a2:62:6d:34:31:74:d7:33:
5b:8d:3a:8a:86:7b:69:0c:55:86:a7:30:91:e4:13:58:8e:cd:
04:a1:f1:5b:7b:13:24:3c:d5:51:c2:b6:f0:87:26:22:2e:30:
15:d5:db:72:16:13:8f:3b:95:ab:1b:10:de:f5:71:43:42:76:
de:05:27:c1:ac:c9:bc:d3:c0:ba:75:02:fa:c1:4d:bf:a4:36:
4a:a6:1d:0b:f5:e3:ab:67:7a:79:98:76:d0:c7:7f:ef:b8:b3:
a0:e0:80:98:56:04:4a:8b:ff:73:7a:73:eb:ba:49:bf:1f:32:
85:bd:eb:38:e4:77:1d:2c:6d:bf:dd:57:6d:92:74:32:c9:d2:
bf:22:d4:5f:4a:84:72:65:83:2c:7c:59:c8:38:ed:15:8e:b7:
c8:b5:9f:19:d1:9c:65:0d:cf:a9:5a:ea:50:36:8f:b5:24:8d:
5b:0b:0a:f5:26:22:08:e5:b6:6d:f3:d9:0d:01:33:30:84:c3:
55:f3:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:33 2025 by rpki-client