Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0cc3a6be-9afd-37be-9c19-cd9a1b0e62bf.roa
File: 0cc3a6be-9afd-37be-9c19-cd9a1b0e62bf.roa (raw, json)
Hash identifier: lR+SuvufMGYyrvLaT3hVkVv1ZmniYTv4lRVsjCAy0Hw=
Subject key identifier: 3B:2C:0E:EA:C5:80:AB:CF:5F:1D:9B:50:8D:24:03:E2:CE:EF:26:ED
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921342B1D0A72105904604100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0cc3a6be-9afd-37be-9c19-cd9a1b0e62bf.roa
Signing time: Sun 09 Mar 2025 10:20:37 +0000
ROA not before: Sun 09 Mar 2025 10:20:37 +0000
ROA not after: Sat 07 Jun 2025 10:20:37 +0000
asID: 577
IP address blocks: 70.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:2b:1d:0a:72:10:59:04:60:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:37 2025 GMT
Not After : Jun 7 10:20:37 2025 GMT
Subject: CN=a02ddd34-8322-4a69-92d0-502235d75411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:67:45:8a:af:9c:48:fe:89:3d:f8:97:e8:
1a:ab:e6:dd:af:c0:1c:80:bf:a7:9d:fb:26:5d:da:
cd:19:a2:f1:29:c0:0c:26:75:20:7e:b1:fd:47:31:
e4:b1:df:a1:39:00:cb:f9:b5:68:06:ce:ca:53:42:
24:93:75:95:59:94:84:6c:b5:cd:82:56:ee:b7:a1:
df:a9:87:e4:d5:6d:c1:cd:61:a2:30:d8:0a:80:40:
c6:24:c8:56:cf:60:5e:ad:8c:a1:3e:5e:b4:a7:8a:
0b:da:38:9d:cd:03:b9:8d:41:50:90:69:8c:26:36:
8d:05:84:94:29:85:fd:b3:87:c5:57:04:25:ac:2f:
75:f6:df:3b:f0:c0:b5:03:4b:8b:32:45:19:f7:85:
82:67:d2:09:6d:25:cb:7a:32:e7:6e:76:82:05:5b:
ac:b3:58:3b:67:e0:96:4d:27:fe:8d:16:a0:b8:8b:
47:50:91:e5:3b:52:51:b8:a2:da:c4:20:fe:65:03:
d1:94:dc:0b:9b:b4:ee:63:aa:a9:bb:00:31:b8:93:
ee:12:c3:e6:fa:1c:6f:a7:66:67:d3:60:c6:cd:bc:
c9:48:73:7f:21:b1:e3:14:0a:f7:f4:47:cd:e0:bd:
fb:29:28:28:4c:e1:b7:11:5e:36:fc:1f:72:1b:31:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2C:0E:EA:C5:80:AB:CF:5F:1D:9B:50:8D:24:03:E2:CE:EF:26:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0cc3a6be-9afd-37be-9c19-cd9a1b0e62bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:9b:3b:59:dd:e5:5e:77:3a:e9:18:ad:20:83:4f:3c:74:7b:
42:22:5f:0d:5c:21:e4:e4:4e:4b:4c:a2:17:b9:a5:b9:e2:22:
cb:ad:7c:84:6b:50:06:c9:2d:d1:bb:94:48:9f:72:ba:63:3e:
5e:e9:03:9c:65:bc:00:a3:28:a2:3b:10:cb:87:cd:13:0c:d2:
c5:73:39:16:3e:d6:bb:66:4d:b0:ff:f3:37:c1:22:40:fa:1e:
58:be:d2:2e:13:7d:21:4b:5e:af:9d:41:01:56:35:78:d5:3e:
6a:1a:8c:98:b6:07:1f:58:39:30:f4:4e:3b:16:5f:e7:bb:d3:
da:6b:36:a9:c6:de:f9:a6:80:d4:fd:71:42:71:54:f7:5f:54:
6b:1a:d5:75:c3:94:7a:c8:cf:3d:91:c9:61:fe:27:8c:b2:83:
30:84:e4:c4:2c:9b:a3:6b:80:17:27:e5:1b:c3:8c:14:c5:3f:
06:11:84:b5:44:37:bc:d7:ae:12:47:22:84:90:08:7f:b6:7f:
c8:a5:5f:88:97:a8:de:1b:77:72:2d:cb:e1:c7:1c:0f:49:4a:
fb:b5:bb:8d:bf:86:cf:f8:c5:cc:10:0b:94:db:a5:56:49:10:
75:63:2d:a4:6f:aa:c0:aa:7e:0f:60:ed:ac:58:f2:11:27:5f:
63:11:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:55 2025 by rpki-client