Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa
File: 2d941046-d327-388c-9f7a-ab2771f7f1a4.roa (raw, json)
Hash identifier: G/LXvuoI3T7OhrRR5e/khOFz/+uGmZaLeuMNt/RLxO0=
Subject key identifier: 11:55:0C:24:9F:29:B6:4A:E6:0D:02:22:A6:FC:3F:52:E0:51:DD:65
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F43285848159FEAEAE1F9D6C2263BB900
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 12129
IP address blocks: 209.124.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ea:ea:e1:f9:d6:c2:26:3b:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=84c8b0fe-3f76-42b4-9f23-0cb4de136de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e2:f5:fd:8c:2f:02:92:2a:51:07:ba:ca:1e:
6d:c6:89:0e:e2:bd:60:9b:e3:d1:c2:5f:29:57:ad:
83:48:3a:18:d6:36:3c:36:0a:b2:05:db:de:f8:7a:
e1:e8:0a:67:2d:e0:02:9b:42:87:c2:fe:6e:18:6a:
4b:55:57:25:28:17:a4:a1:24:ea:40:15:18:95:b5:
72:65:fd:4b:cc:64:9c:da:d3:24:30:8d:ea:ab:77:
3d:b8:97:53:0b:2c:1e:0c:29:ad:a1:4f:9d:ff:ae:
52:dc:c9:c9:0f:73:f1:34:35:90:53:42:3c:09:d5:
7b:32:70:3d:f0:97:a1:ee:40:63:f9:5d:de:b7:0c:
90:b5:3a:d9:4a:6d:f2:10:48:1d:d6:f0:47:32:74:
81:16:e9:46:a9:3f:d8:84:0a:36:25:97:fe:b7:71:
70:18:b1:7d:35:63:1d:55:2a:b2:1d:fa:44:85:60:
fe:1c:9b:b9:d6:53:7d:45:4e:e2:94:76:6c:98:1a:
5b:ba:ec:47:82:3c:fd:ad:c5:55:2f:97:e3:45:08:
2e:19:48:aa:a2:b4:01:b5:d4:43:94:03:87:90:dd:
52:f3:12:71:9b:1c:4f:d5:ff:51:ba:4b:d6:45:3e:
ae:cd:f1:2c:bd:46:06:29:90:e4:77:11:3f:ee:5c:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:55:0C:24:9F:29:B6:4A:E6:0D:02:22:A6:FC:3F:52:E0:51:DD:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:39:8a:75:ec:d9:81:fe:d0:6d:07:d8:0c:72:be:97:28:f5:
30:8c:e2:aa:22:fe:a9:ec:37:84:82:3d:df:1c:f1:8d:83:5c:
9d:b4:ce:2a:96:4f:4a:1c:0e:0f:8b:16:5b:da:9f:50:ef:59:
2e:73:f9:99:c5:c9:8b:be:9a:13:90:7c:0e:2a:5a:08:c9:e7:
8d:99:77:dc:5e:4c:a8:03:17:0e:73:3c:61:64:a4:b4:e3:b5:
7a:48:96:99:4d:9c:0f:9d:ed:07:b2:cb:60:74:40:83:d9:61:
cd:25:b1:3b:84:e2:c1:4a:9b:b7:94:80:8e:66:36:5d:36:f7:
49:d0:fe:25:a6:e5:9e:a2:e5:79:8c:31:6c:9e:36:f7:01:83:
2f:d3:0b:74:2e:16:b4:a9:68:05:d8:7c:0f:ea:99:4b:41:47:
1c:17:c3:1a:d1:b2:34:b8:13:22:4b:5d:7d:4b:1b:27:ef:d7:
6a:3e:35:11:f6:24:08:b9:00:69:d3:5b:c3:47:09:f1:b5:18:
59:da:9e:16:f0:27:ae:8e:cc:f5:41:73:97:2e:ae:3f:f0:1b:
45:da:d4:ed:73:0a:12:a9:b7:2c:24:d9:66:03:d9:df:b0:c4:
ff:9b:c9:37:49:24:43:2e:2a:50:d7:bb:e8:07:5e:c6:fa:b8:
80:d0:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:57 2025 by rpki-client