Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0ea8a0b8-daeb-3894-a8a9-02b072633641.roa
File: 0ea8a0b8-daeb-3894-a8a9-02b072633641.roa (raw, json)
Hash identifier: S3CcSGPmIpgZ10LE6a6D38ScaElRF3gXqN+gVCgBhRY=
Subject key identifier: B7:D3:6E:84:73:27:F6:C0:B2:54:E2:2D:95:88:3A:73:EA:FF:B5:28
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213425D2DF4A26B9C24BF480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0ea8a0b8-daeb-3894-a8a9-02b072633641.roa
Signing time: Sun 09 Mar 2025 10:20:34 +0000
ROA not before: Sun 09 Mar 2025 10:20:34 +0000
ROA not after: Sat 07 Jun 2025 10:20:34 +0000
asID: 577
IP address blocks: 50.100.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:25:d2:df:4a:26:b9:c2:4b:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:34 2025 GMT
Not After : Jun 7 10:20:34 2025 GMT
Subject: CN=5557d1a6-b057-4a2c-b727-c686fc6ecc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:37:13:51:81:66:04:e0:88:5a:41:a0:b5:
db:ba:22:95:aa:3f:77:56:15:15:d7:3d:41:20:7c:
60:b6:8c:d1:8f:b2:dd:23:ab:ce:39:6a:e3:c4:ce:
57:91:69:cf:2a:4c:2e:0c:f3:41:5c:78:36:65:fa:
cd:1c:6f:7b:ec:6e:60:8c:5e:8a:bb:a9:0a:36:fb:
ad:33:04:8d:ea:1e:17:f4:07:f0:df:06:e8:01:40:
e8:c8:92:84:34:d1:d8:b7:e3:6f:af:53:ca:ae:74:
c7:11:ea:d0:af:2f:79:fb:69:21:b4:cf:d9:2d:22:
f2:17:fe:a8:c5:74:08:3b:4c:63:77:b2:a2:d1:49:
4e:78:94:02:03:1b:c7:5f:b7:ce:d1:7a:80:21:1b:
ab:25:ce:9d:2e:4c:8d:39:11:0d:cf:cc:9f:2f:2f:
fe:ba:9d:1a:f2:00:c1:1e:39:25:f6:05:d1:45:f1:
22:0a:14:18:9f:15:60:31:61:dd:7a:11:d2:b4:47:
bf:36:57:3a:5d:63:e6:9c:3a:ef:dc:2e:e5:25:54:
88:01:42:bc:b8:41:1f:d2:f4:d0:dd:20:3f:4b:87:
39:d3:40:6c:49:92:c7:dc:91:8e:9d:e9:da:e8:c0:
b6:13:ed:82:2a:fe:72:46:3a:1a:98:1a:4a:84:ca:
f1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D3:6E:84:73:27:F6:C0:B2:54:E2:2D:95:88:3A:73:EA:FF:B5:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0ea8a0b8-daeb-3894-a8a9-02b072633641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
50.100.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:b5:48:db:52:92:a5:db:8a:eb:00:eb:bc:fa:1f:d0:e3:47:
e2:db:58:fb:c6:84:46:fc:74:40:fb:e4:94:20:8c:c4:e0:a0:
23:0d:ff:2b:cf:4f:b8:07:60:4e:7b:69:51:17:ce:2f:21:67:
58:21:77:2b:c5:ad:32:1c:27:43:19:04:ec:1f:2b:cc:ff:83:
a2:79:a7:d4:05:66:ae:c9:ef:b8:a5:87:b8:fa:d2:a7:37:b7:
df:ec:e1:ff:8d:d7:0a:d0:f2:d5:94:9f:6b:32:57:09:39:95:
32:8b:e2:f6:d0:58:c7:bb:99:d8:82:02:e1:af:53:1e:78:e5:
d6:25:2e:93:7b:58:6d:63:1c:e2:94:39:a3:db:b7:9f:c0:9e:
9a:9e:ee:56:8a:3b:12:6f:93:d7:fe:d7:e5:a9:59:db:42:e6:
d8:5f:e9:bd:6f:00:f3:23:1f:be:86:21:08:68:7a:2d:ea:10:
4d:3f:48:ce:ad:c6:9e:ae:89:2a:91:19:83:72:26:03:fb:76:
0d:ee:97:6f:06:24:77:6e:61:ba:1b:f5:71:9e:1c:c0:23:32:
bc:13:90:bf:56:03:82:5e:2d:76:c9:89:7f:e5:30:52:7d:b5:
f8:64:ca:df:8e:df:6b:88:39:43:5f:fd:40:9f:2e:fd:b5:ab:
be:a5:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:08 2025 by rpki-client