Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10ea2a38-d5a6-3a54-ae0b-f338e59e32cc.roa
File: 10ea2a38-d5a6-3a54-ae0b-f338e59e32cc.roa (raw, json)
Hash identifier: jB1wnpuDvoMx7jQXuyMtVZalY64fpjvApItQ4ikrr3U=
Subject key identifier: A2:E5:32:1F:98:FB:4C:E2:72:83:2C:F7:D2:0A:0B:F1:A3:72:F8:BC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134415437A388393921CC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10ea2a38-d5a6-3a54-ae0b-f338e59e32cc.roa
Signing time: Sun 09 Mar 2025 10:20:47 +0000
ROA not before: Sun 09 Mar 2025 10:20:47 +0000
ROA not after: Sat 07 Jun 2025 10:20:47 +0000
asID: 13441
IP address blocks: 204.101.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:41:54:37:a3:88:39:39:21:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:47 2025 GMT
Not After : Jun 7 10:20:47 2025 GMT
Subject: CN=3b93dc6b-5d70-48a6-a99e-2d38a982a818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:ee:f3:6d:d4:db:47:7e:3c:04:19:b1:b2:
8d:67:cd:0a:1a:a7:56:03:c1:00:31:a3:f9:1d:aa:
f0:47:4e:a2:04:fd:5e:b0:19:0a:aa:3b:c4:ae:af:
df:3d:f6:b1:fa:4c:a3:76:a6:91:f3:65:be:72:bd:
f2:b1:5c:45:0d:e8:af:c6:15:11:49:13:2a:14:9b:
92:84:75:b5:4c:87:21:26:ba:ca:c6:a5:c2:7c:bd:
6e:aa:98:ef:47:12:af:8c:e8:fb:77:21:47:c4:f1:
05:49:46:69:fd:4e:e2:ee:0d:54:29:0f:e5:e0:b4:
cc:f5:0f:44:81:ab:90:ac:ad:de:25:58:db:b0:9b:
de:f5:ec:14:03:e1:98:4e:30:82:a2:05:6a:02:ff:
ab:c0:1a:b4:fa:b3:50:c3:15:e4:33:96:8b:37:28:
05:f1:f1:0b:7c:00:e3:37:68:01:4c:2e:b0:17:98:
f9:cd:8e:e3:63:57:0e:4d:50:7e:d4:58:87:73:bd:
39:4a:3e:7e:ef:03:ed:ff:28:81:1a:3c:93:72:bf:
4a:5f:7f:d6:cf:d4:54:8a:c6:62:cf:d3:cf:cb:70:
53:63:0f:3b:06:73:18:4a:1e:d4:27:09:06:78:ac:
34:59:eb:47:0b:50:ae:ae:94:1f:2b:fb:85:b6:de:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E5:32:1F:98:FB:4C:E2:72:83:2C:F7:D2:0A:0B:F1:A3:72:F8:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10ea2a38-d5a6-3a54-ae0b-f338e59e32cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:51:28:cd:a0:29:8e:3c:76:c9:66:e8:0b:bb:ef:44:13:c1:
96:42:1c:41:91:7a:af:95:8f:5f:f0:b3:71:9a:b9:10:08:fe:
f9:77:98:04:a1:d8:fc:07:a7:cc:aa:18:0d:6b:0b:02:68:1f:
a8:28:b7:dc:99:16:a1:d5:4a:f8:8f:6a:32:a2:1d:a3:f9:a9:
5c:e3:35:0e:1b:b7:7e:8f:92:ea:4b:57:2a:95:69:99:a0:98:
6c:96:16:f2:c7:f3:c9:32:0c:0f:5e:e8:c9:cf:12:3f:86:fa:
b2:32:67:4d:2a:99:ba:29:7a:c0:ad:97:88:4c:bf:2a:df:86:
d9:94:12:ab:64:87:b7:c7:c3:a5:46:12:ab:1d:4f:82:65:1c:
f6:73:4e:5c:5a:66:ab:c0:e4:fb:83:02:42:da:1d:d5:7c:f2:
c3:ce:a4:a3:42:5a:35:c4:1c:f0:db:0a:e5:7b:05:fc:fb:4e:
6a:a5:39:7b:f0:e2:3e:f1:79:84:85:aa:02:ba:8e:a7:d1:5d:
23:b8:10:1c:69:fc:30:27:a1:cb:7a:ec:88:87:e4:f7:a5:91:
00:04:64:51:21:c8:04:6d:05:0d:b4:77:ed:7d:8d:b3:08:6f:
ed:0a:26:df:4d:d6:d1:05:cd:a7:e3:69:74:cb:2c:b9:00:f5:
75:01:24:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:43 2025 by rpki-client