Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/03586e43-8b6b-3b70-ad31-e9c3dadc8352.roa
File: 03586e43-8b6b-3b70-ad31-e9c3dadc8352.roa (raw, json)
Hash identifier: ysk+frilGYEi1aPiDV80Xu5zooDFJE+jP17if64la/c=
Subject key identifier: 71:92:26:85:61:B0:E6:6B:E2:60:0F:94:2A:20:5A:92:85:C8:C9:58
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921345C5B9B8B2B7DC2101580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/03586e43-8b6b-3b70-ad31-e9c3dadc8352.roa
Signing time: Sun 09 Mar 2025 10:21:00 +0000
ROA not before: Sun 09 Mar 2025 10:21:00 +0000
ROA not after: Sat 07 Jun 2025 10:21:00 +0000
asID: 36522
IP address blocks: 207.236.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:5c:5b:9b:8b:2b:7d:c2:10:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:00 2025 GMT
Not After : Jun 7 10:21:00 2025 GMT
Subject: CN=7ee55f1c-7493-4bc4-9e17-09c90824ba3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:28:35:83:c8:73:f4:d2:5b:77:27:14:08:
98:f0:d9:94:f7:f5:09:67:ca:9f:17:74:bd:a4:22:
22:ce:54:32:45:ef:70:c0:b6:2b:30:c9:3f:00:48:
91:ec:8e:5e:64:be:3e:1f:12:25:d3:95:6d:83:05:
5d:47:92:a1:ae:f8:b8:c2:59:ea:13:65:9c:40:ae:
96:2f:25:8e:6e:8d:61:2c:f2:4f:64:ae:60:fc:3b:
96:10:5f:fc:7c:d9:32:b0:a4:75:d6:e4:92:ad:23:
8a:34:ae:8b:5f:25:c2:4c:1e:e6:88:3f:93:8f:bf:
88:37:e3:6c:42:43:d1:f1:bf:31:67:1e:fb:32:f1:
71:45:80:a0:67:fe:ef:71:1d:6f:bb:aa:b7:2d:8c:
75:a3:f5:82:75:8e:b1:73:51:c4:1a:a9:72:30:6e:
8e:db:5a:a5:b7:24:87:d6:f0:b8:4c:b6:f0:df:e0:
65:d8:50:7b:ca:08:3f:fe:a6:08:dc:40:a1:b4:88:
9b:41:33:86:02:bd:25:8e:ae:16:5c:d3:05:9b:75:
5d:d3:44:75:02:c6:ae:18:43:3a:f9:d5:ce:cb:38:
83:ff:30:8d:4a:56:c8:f1:cb:cc:ca:95:c5:c2:4f:
5b:e3:37:cd:14:4c:88:53:63:67:2d:e8:05:2a:d4:
dc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:92:26:85:61:B0:E6:6B:E2:60:0F:94:2A:20:5A:92:85:C8:C9:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/03586e43-8b6b-3b70-ad31-e9c3dadc8352.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:df:d8:d1:fd:88:84:5c:8e:a6:e9:d3:00:da:ce:3d:fe:cb:
54:0f:10:41:a1:5c:b2:cb:06:62:9e:be:8d:c5:36:a7:5b:3d:
c4:47:fd:34:bc:db:49:55:b5:3a:a1:dc:71:ca:d2:f9:41:58:
c0:12:2f:62:55:82:40:62:df:7f:df:b3:5f:bc:20:11:72:72:
2e:25:5d:b1:0f:99:c1:3c:6f:ed:3c:8d:55:38:64:a9:62:66:
f2:bf:da:6c:04:b3:1f:5f:85:b7:c2:3e:bf:08:2b:49:46:86:
d4:1a:e8:74:ca:19:0a:45:69:86:0a:91:8d:57:60:3f:81:d1:
57:c2:5d:3a:29:a0:44:b1:ef:fe:0d:4b:be:79:3e:96:05:38:
25:68:9f:5a:da:d6:b5:30:4e:98:ec:3a:48:dd:e2:f3:fd:f8:
96:07:e1:7b:fe:4e:33:e0:22:da:ec:72:ab:9e:a7:2d:7b:90:
bf:11:6b:a9:9b:1a:1b:3a:20:8c:3a:42:9d:43:db:fa:12:41:
67:9c:d4:64:33:50:4d:8d:4b:45:fc:3b:1b:5f:68:67:e5:d9:
5d:98:d8:54:43:cf:07:41:1e:f0:ea:31:38:23:70:23:2c:9f:
41:55:28:66:6e:a0:d9:9f:e6:8b:71:a7:24:1e:ce:20:87:87:
7d:dd:3f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:30 2025 by rpki-client