Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/54b0fb2c-b5d1-365b-9cae-cb861cd1aafe.roa
File: 54b0fb2c-b5d1-365b-9cae-cb861cd1aafe.roa (raw, json)
Hash identifier: 65mbERmzx/RLLK91E9LMFssm4nHMiLQZnRXq2jDoVRI=
Subject key identifier: B1:7E:0D:0A:81:4E:B5:B5:35:96:27:50:22:EF:57:21:9E:F8:AE:1D
Certificate issuer: /CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d
Certificate serial: 010D0C9F4328584812D532E9D981E77AC3BEDC00
Authority key identifier: 92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/54b0fb2c-b5d1-365b-9cae-cb861cd1aafe.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 1299
IP address blocks: 209.95.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:32:e9:d9:81:e7:7a:c3:be:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=e032bc0c-6fdf-43c3-8f17-967231717304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:99:ef:f5:bb:a6:7b:39:78:d5:07:bc:9d:18:
07:17:c6:4a:f7:87:33:ef:db:92:3a:13:1c:3e:ca:
7d:b9:22:e3:6b:5c:51:dd:1c:de:c4:40:ec:63:ee:
f6:cf:42:18:22:8a:17:51:1b:8e:45:66:d2:c9:43:
f0:b6:49:82:44:44:8a:f2:f1:a6:64:4c:c0:ae:ac:
35:fb:91:b5:7a:6a:df:64:81:27:90:9e:b9:bb:4c:
6f:53:1b:09:ca:d0:c1:ed:fa:30:62:0e:06:c3:c5:
34:ad:8d:24:b3:b5:5f:1c:79:cf:e9:af:41:3f:ea:
72:da:46:df:65:e3:78:79:6d:0c:49:b1:69:16:3d:
fd:f7:ef:dc:88:4a:fa:34:4a:5b:f3:e6:25:fc:5d:
6f:68:bd:4a:29:ae:1b:8f:92:26:e2:f7:39:5b:78:
1b:2d:51:c7:c4:5d:1c:ed:d4:68:1b:04:74:9c:86:
6d:9c:48:ca:4a:cd:cc:30:40:05:04:fa:2b:8b:8e:
58:9a:1e:83:8d:6f:ae:00:68:78:c2:77:1d:6b:e7:
73:34:a8:77:43:df:25:db:e8:be:23:8b:36:a2:e2:
97:0d:3d:36:9b:72:3a:b9:bd:85:50:6e:8e:3f:03:
54:00:ec:f8:1f:28:e5:f1:b4:2b:39:df:b0:d4:4d:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7E:0D:0A:81:4E:B5:B5:35:96:27:50:22:EF:57:21:9E:F8:AE:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/54b0fb2c-b5d1-365b-9cae-cb861cd1aafe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl
X509v3 Authority Key Identifier:
keyid:92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.95.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:3d:55:a5:d2:a6:dc:74:df:02:84:bd:2d:ed:c1:a2:1e:d9:
04:b2:24:be:2e:63:c8:ee:d5:de:c4:ed:fc:98:66:24:42:74:
03:65:fe:f9:3e:5f:82:d0:a6:ae:5f:08:00:4f:3f:e2:b8:e5:
6c:c1:e5:c5:b9:47:79:4c:da:9d:e1:77:4f:bb:1c:48:76:4a:
07:c9:29:0c:31:ce:d5:96:2d:be:95:75:b3:79:bf:8f:2d:22:
ed:d6:b1:c9:79:17:ec:29:07:f6:fc:4f:c8:24:3e:f0:01:3f:
33:91:60:13:eb:90:8f:2b:68:4a:fa:f1:dc:74:8f:46:dc:4a:
24:54:7f:fb:09:d2:70:35:aa:64:99:89:ae:92:4c:66:4c:4f:
3a:83:01:cb:97:ae:0f:db:12:e6:15:67:ef:20:ae:cf:f8:33:
e5:00:f9:0a:9f:20:e6:ff:ef:9d:a7:59:1b:2a:a4:e6:1e:25:
2c:af:02:49:06:c7:cd:85:42:de:b0:c5:b5:35:0e:9a:fa:dc:
f1:6e:0e:4c:0b:b1:da:fe:ec:49:91:e3:ea:80:ff:7e:81:93:
74:b1:f8:2b:e5:ce:6a:3f:38:b0:3b:4f:2e:4e:82:c7:91:24:
07:b7:cc:d4:2b:08:c9:00:fa:76:88:99:a6:24:57:f0:1e:18:
13:35:02:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:21:04 2025 by rpki-client