Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0ebd2f87-8f31-36db-ae3f-052bb0f25f3e.roa
File: 0ebd2f87-8f31-36db-ae3f-052bb0f25f3e.roa (raw, json)
Hash identifier: Z6N1UQotj2x+2QyncruW5RWRpRKjIxtDaLeki6puj8Y=
Subject key identifier: 8F:AE:46:FE:BC:31:56:4B:42:EF:F2:F5:82:0E:75:CB:48:7B:DC:F5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213459AA090298D7D39F4800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0ebd2f87-8f31-36db-ae3f-052bb0f25f3e.roa
Signing time: Sun 09 Mar 2025 10:20:59 +0000
ROA not before: Sun 09 Mar 2025 10:20:59 +0000
ROA not after: Sat 07 Jun 2025 10:20:59 +0000
asID: 15321
IP address blocks: 207.164.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:59:aa:09:02:98:d7:d3:9f:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:59 2025 GMT
Not After : Jun 7 10:20:59 2025 GMT
Subject: CN=a63f81ef-368a-479a-8f1d-304dbc914947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:cc:b8:62:ab:0f:be:35:01:40:97:23:57:
89:a4:39:2a:5e:77:f1:21:58:f3:17:00:fb:16:47:
1b:21:f1:c6:a8:f9:f5:16:a0:2b:62:b2:d4:2a:95:
a7:2e:fd:ac:5c:68:34:d3:32:ae:96:34:73:73:32:
2e:6b:fa:ec:8f:fa:a8:e2:a6:ce:cc:31:cc:e5:9b:
01:a7:17:0e:bc:3a:c0:10:e4:3f:eb:66:94:6d:8c:
00:5e:3c:03:c5:62:62:f9:f2:1e:ac:49:a8:76:94:
ed:d8:13:b4:70:c1:f9:77:99:f8:9b:73:2d:54:bc:
ee:fc:10:a6:f5:04:62:67:4e:64:db:82:64:88:60:
55:d7:bc:e9:64:a3:44:c6:f8:10:82:7d:db:8c:6b:
87:d1:81:58:95:ea:81:76:94:d3:f8:9f:04:5b:a3:
38:43:84:00:e1:31:56:b9:50:33:ca:b3:a0:8f:a8:
57:c9:7f:7f:14:a8:26:88:04:d7:c3:40:7a:65:3a:
42:ca:11:40:e8:86:4e:d6:a1:21:b4:b8:e7:b3:4e:
0b:0f:77:ee:44:75:22:1c:1d:6b:fa:bb:30:8b:af:
85:87:e0:5c:21:63:12:db:52:6a:12:42:85:de:bc:
31:9f:8c:28:76:d7:0e:e6:6e:89:7f:1c:c3:95:28:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AE:46:FE:BC:31:56:4B:42:EF:F2:F5:82:0E:75:CB:48:7B:DC:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0ebd2f87-8f31-36db-ae3f-052bb0f25f3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:68:4e:9c:2b:ed:ba:29:b3:fe:a0:d9:e2:e4:1b:b4:82:bc:
06:d0:f8:ff:2b:e7:dd:b7:66:03:67:b8:50:38:a1:04:cf:97:
1e:72:ec:de:fa:17:4d:f2:aa:7f:df:12:89:10:51:ad:ce:af:
20:d9:94:25:d6:68:dc:5e:ad:51:c8:ee:d0:18:a4:48:5a:8d:
77:28:00:13:f7:86:4e:ca:50:87:9d:d3:34:01:8c:19:72:a5:
58:af:3d:a6:92:f2:5d:4c:ff:ba:93:42:43:06:ea:44:fc:9d:
71:02:ae:4c:29:c6:b6:95:a7:c7:84:ce:7c:a6:6b:dc:e6:42:
a4:97:a3:75:80:c1:92:0c:93:7d:4c:a9:a3:9e:0c:8e:14:4c:
fa:69:35:50:4c:d1:20:99:27:2c:18:ca:28:ba:03:bc:6f:a6:
c7:d6:e2:c5:e8:b2:9d:bc:7e:4d:8f:1c:9c:02:53:0a:17:72:
1d:54:bd:93:35:05:60:2d:b8:f6:97:3e:e4:c8:6c:76:58:34:
98:80:ec:9c:ee:45:26:36:6d:41:0e:50:2c:53:21:f2:06:cf:
dc:8b:4f:37:23:20:61:33:2b:59:07:a4:e1:44:8c:a1:80:23:
3b:75:2f:4d:e2:1a:12:82:27:eb:de:95:bc:9b:e4:5d:fc:2b:
47:71:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:51:05 2025 by rpki-client