Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa
File: db5733de-d9ee-315a-b4ee-49bb473ee114.roa (raw, json)
Hash identifier: EiwUgpcXnjZ1UZYbMoqorBah7gnnyI6deytXu1/kSvE=
Subject key identifier: CC:02:AA:54:31:C3:52:4E:23:5F:E0:7F:6D:EB:42:18:96:B1:04:77
Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Certificate serial: 010D0C9F432858486D904C961E6ACC83068EFC8C
Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 21803
IP address blocks: 209.140.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4c:96:1e:6a:cc:83:06:8e:fc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=f05150f8-ca97-4d13-8f64-fa9a696c6685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:1c:7f:fc:4f:f3:f0:3b:f2:fd:1d:49:7f:
ed:30:86:5b:f5:64:a8:ee:2b:32:5e:76:f5:dd:2d:
11:6d:c7:ec:07:84:86:37:09:0e:77:49:84:70:7c:
09:2b:cf:7e:66:61:54:45:3a:79:2b:d1:77:65:37:
dd:9f:19:6c:86:73:85:2c:dc:4d:48:8a:66:d5:ea:
5f:7e:0a:8c:08:f9:8b:7a:2b:b1:da:57:27:13:94:
4a:7f:68:a5:4c:9a:4c:c2:62:65:12:18:9b:28:4a:
50:bb:c3:dd:6b:1a:3a:d2:f3:f6:4b:1b:ba:31:1d:
46:92:99:87:b1:22:16:34:43:f7:24:8d:40:de:63:
56:87:eb:12:fb:b6:79:44:79:c1:3b:33:34:11:f2:
73:9c:a5:58:dc:82:2c:52:ab:ec:64:1d:b6:32:da:
fc:3f:c7:b8:ed:09:9c:34:e9:05:27:8a:89:24:90:
8c:6a:71:4d:6d:43:dd:73:d7:b7:58:2f:6e:03:b6:
3d:67:24:e8:02:7b:99:c3:9d:2c:43:e2:a2:26:6e:
47:a3:2d:6c:3e:1d:56:2a:03:f9:7f:1a:d8:19:18:
f7:93:6a:b1:4f:c9:87:94:7f:c5:1a:cd:5f:26:98:
c9:2d:5e:fe:63:06:e9:a3:64:84:ef:cc:dd:76:41:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:02:AA:54:31:C3:52:4E:23:5F:E0:7F:6D:EB:42:18:96:B1:04:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl
X509v3 Authority Key Identifier:
keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.140.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:6b:1e:80:ea:8f:68:5c:11:e6:ba:1f:63:47:b5:17:e9:55:
e3:89:b2:2c:aa:63:0e:63:da:e6:00:97:cd:02:de:e9:a1:9f:
61:de:67:89:90:a1:1b:54:d2:29:de:fb:74:d5:dc:d9:41:cc:
e5:8e:4a:ff:2c:06:90:24:e3:70:77:f6:f5:37:27:b2:02:92:
92:c7:e7:29:b4:87:56:25:b8:6b:05:09:a2:b1:f1:9c:36:6a:
fb:de:18:44:a6:71:87:00:49:f2:7a:0a:f7:0c:64:34:52:51:
54:51:ea:17:d0:9e:e4:d7:8e:fc:fc:b4:8a:bc:f9:17:52:72:
51:62:9d:5e:65:e6:9f:2a:d5:8f:1d:e4:f6:45:2f:33:85:3e:
11:2e:ea:b2:8e:34:49:55:94:85:67:51:0f:f1:56:21:f9:51:
0b:71:a3:f1:16:ab:c8:68:e9:56:97:81:65:cc:75:c6:f8:07:
6e:a8:2a:1c:e5:4e:18:96:9c:34:0b:98:9e:50:c8:4b:1e:f7:
6c:38:b5:18:cf:a7:1c:6d:ea:c2:0e:61:a0:92:31:03:31:d9:
41:21:94:ba:55:9f:5f:a9:d5:e2:7c:b9:33:64:7a:9f:cc:9b:
15:1f:f5:06:6f:ec:a3:69:38:76:30:a7:90:4f:8e:e1:df:71:
e8:6b:2a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:42:24 2025 by rpki-client