Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/db8a7784-b1c1-320c-86ec-b693250bff8d.roa
File: db8a7784-b1c1-320c-86ec-b693250bff8d.roa (raw, json)
Hash identifier: g60Uf+nx3YD3m6drK8rl1CJYhnqF3cXNdOwXvycnviU=
Subject key identifier: 79:5A:ED:1B:90:79:A2:C8:9A:74:9D:D5:68:C4:FA:CF:9C:BA:F3:95
Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial: 010D0C9F43285849B091A278C2A795D620FC10F0
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/db8a7784-b1c1-320c-86ec-b693250bff8d.roa
Signing time: Tue 29 Apr 2025 18:49:32 +0000
ROA not before: Tue 29 Apr 2025 18:49:32 +0000
ROA not after: Mon 28 Jul 2025 18:49:32 +0000
asID: 199527
IP address blocks: 209.250.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b0:91:a2:78:c2:a7:95:d6:20:fc:10:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Validity
Not Before: Apr 29 18:49:32 2025 GMT
Not After : Jul 28 18:49:32 2025 GMT
Subject: CN=c3b73a1e-397a-4f0a-88f5-eaf928d2fe9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:32:32:45:06:63:2f:1d:25:36:f9:6a:19:3c:
b7:9f:21:bc:b6:e6:18:b1:8a:83:80:05:62:29:b4:
c8:c0:18:1a:79:8a:66:e1:02:72:0a:b4:09:ac:40:
10:7c:92:20:f9:3b:dc:55:34:b0:8b:67:d9:a5:ec:
e0:d4:ae:ae:10:9f:d6:27:b8:96:c0:4c:e9:ed:cd:
e8:6d:ba:4f:74:2c:bc:5e:17:4e:0b:5f:25:f6:c4:
35:26:18:14:7a:97:d6:8a:17:14:3a:0f:e5:01:50:
a8:5e:05:03:e1:59:4a:94:9f:c9:bb:ea:1f:76:65:
4b:92:79:db:77:13:ea:46:16:10:8c:b1:9f:12:48:
12:9a:e5:f6:c1:8a:4f:ef:b4:cf:83:bc:4b:93:7b:
47:a6:7e:9e:33:86:4c:5b:96:70:84:ba:b2:28:59:
5c:fe:8c:03:00:f9:ea:39:8d:d0:77:46:47:94:45:
2b:b8:c7:3b:3a:4f:a8:9b:ba:d6:05:12:ba:31:da:
e6:af:17:7c:1a:ba:2e:ff:71:25:03:3d:59:23:0d:
c3:0e:bc:99:dd:6f:a8:e8:d0:9f:23:25:01:b8:e9:
5e:2d:0c:5f:51:e8:66:9d:70:81:cf:91:6e:ca:68:
e1:e0:81:8a:cb:1e:bc:02:d2:f2:40:90:58:0f:4b:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5A:ED:1B:90:79:A2:C8:9A:74:9D:D5:68:C4:FA:CF:9C:BA:F3:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/db8a7784-b1c1-320c-86ec-b693250bff8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
X509v3 Authority Key Identifier:
keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:47:21:1f:43:20:f2:56:85:20:cd:26:84:5d:3f:f0:a8:6a:
2e:17:2d:5e:b9:f5:c4:1a:30:80:36:d0:4d:61:8a:54:e0:d1:
5b:3b:91:1a:c0:5f:45:28:34:9a:96:02:c4:51:f8:ef:04:9c:
8b:4e:81:26:af:78:07:1b:16:65:18:0c:d9:1f:50:87:da:bc:
54:6c:62:05:c9:56:1e:34:f4:3e:ce:1e:f7:eb:09:1c:97:70:
28:62:87:76:30:9c:4e:6c:9b:bc:e2:68:81:8a:50:05:bf:5e:
ba:c4:c8:d3:c5:ae:9d:e7:94:23:1c:1e:fd:7b:9e:d6:47:27:
9c:81:b6:f6:cb:f8:63:af:64:ce:87:83:62:e4:54:ac:2a:30:
ba:f0:34:fc:3e:5b:43:b9:df:e6:2a:50:94:a7:d6:77:e5:a8:
c7:29:37:b7:43:9a:34:78:2a:57:36:62:00:16:53:3e:0e:41:
9c:1e:2d:99:2c:b4:f7:e3:2d:39:e4:ad:8b:32:af:18:e0:aa:
ec:f0:78:29:49:04:25:79:47:54:55:77:70:00:a2:a9:9d:52:
12:05:75:0d:e3:19:d3:95:39:36:a5:5c:f7:7a:15:89:c4:f4:
83:6b:4f:70:da:18:b8:ee:86:2b:da:df:2f:51:8e:3b:4d:f0:
a0:b6:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:52:57 2025 by rpki-client