Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
File: 23242619-7075-3ff7-bc60-bde9eb53b0dc.roa (raw, json)
Hash identifier: srIY1VhcQ/yw10dXv8+aojZwjCCJyHVKpTc8TEEv220=
Subject key identifier: C5:49:8B:E9:14:55:5B:4A:AA:4C:C0:89:4C:28:3B:7C:1C:CD:DF:1F
Certificate issuer: /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
Certificate serial: 010D0C9F432858486AC59B39193C4AC127F9C278
Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 14618
IP address blocks: 209.46.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9b:39:19:3c:4a:c1:27:f9:c2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=b04308dc-c5f6-426f-9242-4fc07388a836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:c7:2d:a8:52:81:52:e9:56:06:96:ea:5d:
82:6b:6c:f2:c9:69:bc:94:d4:51:ca:55:17:2b:ea:
d0:8c:a5:13:02:99:3a:65:9f:cd:41:dd:ca:75:2c:
e7:d3:12:47:9a:fd:76:6e:82:4b:fc:c1:41:81:b2:
af:2e:bd:57:63:15:82:8f:22:08:87:4c:66:7d:ee:
2f:c7:fc:f9:bd:8d:45:4a:af:03:ff:98:ef:71:d7:
51:c7:dc:15:7c:db:d8:f5:09:b6:2b:e6:e0:ed:2b:
55:be:e1:92:64:90:08:07:93:00:91:c2:19:d1:c5:
64:33:42:17:bf:12:85:03:32:cf:07:48:bb:a4:eb:
fd:fb:bd:59:b3:37:83:0b:6f:33:73:04:a9:48:79:
65:b5:61:c5:3d:e5:ed:f5:b7:1f:ae:40:7a:c1:e2:
bb:e6:d8:be:09:40:18:0f:49:db:4f:64:4e:ab:93:
39:98:65:ac:b0:9d:67:88:79:96:3f:ff:02:f8:88:
7c:f9:65:f8:32:fd:d0:b3:a8:98:4b:19:a9:b5:8e:
1a:94:92:fa:68:6e:91:26:79:4e:79:e1:dd:0c:c3:
cf:13:5e:79:67:fa:00:d4:ee:05:d9:4b:af:5a:96:
bf:cc:2c:12:cd:48:cd:01:16:28:a6:18:a2:56:2c:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:49:8B:E9:14:55:5B:4A:AA:4C:C0:89:4C:28:3B:7C:1C:CD:DF:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl
X509v3 Authority Key Identifier:
keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.46.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:21:8b:6a:14:24:d3:e8:b2:8f:4d:2d:85:53:19:de:23:c7:
23:b0:18:c3:cf:14:60:32:3c:cb:c1:06:61:2d:9c:ef:11:aa:
d9:7f:4d:59:3f:3b:d0:39:b1:20:68:7c:79:22:52:b8:dc:f5:
24:e5:b5:2b:78:5c:57:e9:ef:26:89:53:ed:08:7c:77:b2:20:
a4:04:62:d3:9b:6f:54:4a:df:0f:e4:b6:1a:de:b1:f1:a9:3c:
ef:5a:fe:f6:3b:1b:dc:12:a8:b9:9d:3a:91:93:cc:67:38:a2:
46:48:ac:3b:7b:d8:d5:87:d5:82:99:07:8b:d1:97:8b:04:e9:
b1:44:e3:20:66:a7:a9:8a:e0:7e:8d:bb:23:d7:21:40:92:56:
2b:81:1a:fe:8f:9a:84:44:38:e6:0c:35:4e:3a:17:a4:2e:01:
a9:70:3f:78:33:e4:c7:65:84:01:e8:eb:ce:73:7f:24:4e:67:
e0:e4:3a:1e:5a:70:a1:7a:ec:5a:0b:9e:5b:c5:1f:b2:83:ca:
7e:0c:0f:e4:7f:51:9d:a0:1d:68:87:3a:7a:45:a8:b9:20:a3:
64:a8:f6:47:d6:ae:3d:82:87:13:e1:1d:2d:b2:f3:e7:ce:f7:
5e:98:ec:e9:f6:25:fd:d0:d5:2a:15:04:d9:35:e0:8f:ab:d7:
6c:44:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:11 2025 by rpki-client