Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa
File: 84d571f2-66e1-3f12-9230-063e7c81b63a.roa (raw, json)
Hash identifier: MFr4AuOLmPuJbtUchwYzg1UAjhxBnhL/No87EHYPsVY=
Subject key identifier: 81:B1:FB:D2:B8:CC:E9:36:F4:A1:FE:5D:E3:33:3D:9B:32:AD:52:5C
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F43285848159FEADA13F63B261BFDFD80
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 12129
IP address blocks: 209.124.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ea:da:13:f6:3b:26:1b:fd:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=073ae545-7197-413b-9ab1-bb5aff7602be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:b4:0d:f2:1d:62:5b:a5:0b:6b:e7:28:55:
7e:58:96:2b:29:b7:39:88:7d:d7:75:86:c2:5d:19:
6d:3c:34:8b:8b:5a:1a:cd:5d:d3:2b:c6:f0:2b:49:
08:86:2a:34:88:06:ff:80:db:b5:f1:98:0f:19:4a:
bb:0d:19:02:f7:81:f1:ea:83:bd:23:be:9a:51:70:
d2:e2:d2:e4:c0:01:6f:3b:1f:e5:ec:7d:38:e4:ce:
e8:d1:3f:0e:97:4f:cd:f4:57:2a:71:b0:71:73:17:
ce:f8:62:ff:fe:e9:0e:4c:9c:dd:4e:c0:80:1c:e1:
d9:ca:16:9f:6c:60:1e:c3:6e:13:ba:80:fc:9f:7a:
ff:f4:c4:5d:41:b9:bb:9d:04:b6:c7:b2:67:fc:81:
82:d0:a3:7f:0c:1b:c7:03:80:5d:ed:7b:51:26:0c:
ab:51:c9:4e:09:55:0e:92:29:1a:4c:ea:14:af:52:
be:16:38:b0:ad:e2:93:94:ab:20:72:c3:3f:35:9d:
d0:1c:2c:7f:68:b4:4f:1a:67:47:3e:2f:2b:d7:e6:
56:a0:03:32:84:65:85:59:99:15:7c:70:bb:29:11:
c2:4c:ae:c5:a0:7a:87:cd:13:37:3b:3f:3c:fe:24:
53:00:46:f4:69:41:c0:93:5a:b6:60:51:2e:c2:8e:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B1:FB:D2:B8:CC:E9:36:F4:A1:FE:5D:E3:33:3D:9B:32:AD:52:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:a7:c3:c0:fd:27:ac:47:5d:b8:0c:85:5b:3a:b1:17:f5:82:
bd:46:ad:04:35:7c:29:34:cb:a8:ba:98:63:63:f9:e0:da:03:
9c:ef:b1:a4:5f:c9:75:8b:85:95:69:de:9a:b2:e6:3d:67:bf:
be:65:83:10:9b:01:f2:97:27:6a:00:ae:0d:25:ae:77:4d:cd:
f0:23:24:bb:46:5a:9d:08:db:08:94:fe:6e:bd:45:f8:99:6b:
67:90:d3:f3:f8:6e:ca:6d:dc:51:61:83:b7:f4:ad:2c:7b:7b:
d4:b0:ab:81:f9:49:09:3f:dd:6f:f4:65:d6:6c:67:eb:a3:c2:
c7:27:0b:20:4b:54:0e:b7:bf:36:4e:b9:81:05:7d:cc:e0:2f:
a1:e2:30:5a:f4:1a:ba:be:ef:80:24:b6:d7:54:ba:1b:b6:0f:
c7:c5:2f:9e:4d:df:eb:3a:06:8b:26:81:e3:d0:c9:b6:d2:04:
ac:cb:ca:46:99:cc:66:45:d9:47:e0:4c:ff:88:96:db:5b:bb:
70:58:73:e8:3e:89:dd:5f:98:db:46:5c:e0:37:20:2f:7f:fc:
21:de:c0:ac:0a:6e:cc:64:f2:64:87:23:dc:e7:aa:09:5f:f6:
5c:4a:2b:8c:ec:2f:f5:f9:ea:3b:55:7a:bf:1d:96:bb:41:c5:
ba:94:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:54 2025 by rpki-client