Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0da11935-3430-30f6-ae46-158f95e6d752.roa
File: 0da11935-3430-30f6-ae46-158f95e6d752.roa (raw, json)
Hash identifier: R775G9Hz9Qk9vCBGCm1aBIkdUI4kkGNWGhzj/V1zJTQ=
Subject key identifier: 0C:BF:DD:56:71:B2:7F:E1:38:6B:EC:B6:CD:42:F7:08:B4:E7:08:29
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134689404EC541BAF5BD4AE
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0da11935-3430-30f6-ae46-158f95e6d752.roa
Signing time: Sun 09 Mar 2025 10:21:06 +0000
ROA not before: Sun 09 Mar 2025 10:21:06 +0000
ROA not after: Sat 07 Jun 2025 10:21:06 +0000
asID: 11831
IP address blocks: 216.18.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:68:94:04:ec:54:1b:af:5b:d4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:06 2025 GMT
Not After : Jun 7 10:21:06 2025 GMT
Subject: CN=35a826b6-5571-4913-9f0c-76eee3e9d2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:ad:47:ce:10:ec:8f:44:49:c6:0b:5e:71:
ec:65:92:6a:37:53:c1:94:5c:83:cc:ea:f9:b5:6a:
cf:b7:f8:27:da:f9:f8:aa:f2:ae:01:19:39:33:89:
49:86:7b:fd:ea:55:0b:64:33:5c:ca:9e:f2:a0:b0:
ba:29:82:3d:f8:0c:8d:17:d0:33:c0:c4:21:9a:41:
42:72:70:ba:87:22:11:bf:fa:ad:b5:cb:1d:7c:57:
e2:f9:9d:91:7f:3e:06:0f:a0:18:66:5e:e1:6c:cb:
a7:a8:9e:b5:9e:24:e6:61:6b:49:66:39:35:a9:ba:
7b:9f:8d:0d:94:53:23:4d:97:fb:a1:65:1a:f2:7f:
95:57:92:bb:95:a4:a2:2b:ee:72:61:0c:a3:c2:c0:
3b:fb:89:33:6e:6f:ac:09:50:22:77:54:f9:97:69:
65:97:64:2e:ca:cb:05:31:8e:83:e9:ff:f3:ea:b2:
8b:60:2a:61:d8:40:5c:1e:8b:55:7b:84:47:6d:15:
f6:f0:74:8f:84:9c:4a:32:21:40:5a:5d:23:17:ca:
bd:5b:2c:e9:9f:6f:75:72:79:43:73:b5:b8:0e:95:
88:97:3f:ef:06:8e:77:e7:cb:de:53:a7:a8:41:fe:
1d:44:78:2f:54:22:37:bc:d2:a8:67:e4:c1:96:eb:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:DD:56:71:B2:7F:E1:38:6B:EC:B6:CD:42:F7:08:B4:E7:08:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0da11935-3430-30f6-ae46-158f95e6d752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:f8:e7:98:f1:f5:4b:6d:65:83:f6:bb:6f:eb:11:f0:1b:b1:
a0:5b:76:41:ea:0b:d0:c4:cd:b7:88:21:f4:79:3c:8e:84:e5:
51:3b:26:00:25:88:b9:53:3b:6c:0f:72:83:b9:ff:62:b4:d1:
1a:8a:08:f3:8e:1b:b5:9e:db:80:14:e2:a5:8a:94:94:74:93:
3e:6b:51:ef:d6:c2:73:f5:a0:5e:d8:29:76:7a:c8:fe:e0:8c:
5f:88:39:59:e0:e1:52:cb:80:bb:19:9d:57:ba:a7:90:4e:07:
56:65:9f:7a:af:43:eb:e2:28:5c:a5:b8:2d:75:19:10:55:33:
10:25:a8:13:2c:48:e9:71:af:9a:93:33:85:4d:9a:5f:0b:fd:
9a:f4:77:7e:07:ef:90:e5:b2:fb:45:87:46:a0:b9:20:5e:48:
99:64:a5:68:fa:6d:9d:2a:df:3f:f7:0e:18:c6:ff:7c:05:63:
6c:46:5e:a3:43:4e:31:f9:ee:aa:6b:28:d2:b6:e9:03:28:75:
89:bd:c5:a7:5b:ed:cb:72:01:c2:ce:52:bc:c1:45:40:30:f5:
f6:4e:61:bb:20:ff:56:d6:59:ea:fc:af:1b:0e:ce:d9:5d:5a:
55:d6:04:aa:f2:9e:8f:11:f2:ce:7b:07:6a:eb:ae:e2:d1:b2:
3c:5b:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:26 2025 by rpki-client