Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d5e754d-d0a4-3a64-bde9-c622bdfd5b0e.roa
File: 1d5e754d-d0a4-3a64-bde9-c622bdfd5b0e.roa (raw, json)
Hash identifier: kszDuWNT2YP2xCCEqYkrHgqs+Z2nIe7aSU4pVJ+aWXs=
Subject key identifier: 35:4B:5E:A8:38:8E:93:24:E1:F4:53:41:83:5C:90:23:DB:6F:B3:5D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343FC16CF33C807C3F7980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d5e754d-d0a4-3a64-bde9-c622bdfd5b0e.roa
Signing time: Sun 09 Mar 2025 10:20:47 +0000
ROA not before: Sun 09 Mar 2025 10:20:47 +0000
ROA not after: Sat 07 Jun 2025 10:20:47 +0000
asID: 36522
IP address blocks: 204.101.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:3f:c1:6c:f3:3c:80:7c:3f:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:47 2025 GMT
Not After : Jun 7 10:20:47 2025 GMT
Subject: CN=199427fd-0dd6-49d5-93d5-10315f57523d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:4a:5d:5e:9e:54:24:8e:32:86:5b:67:c3:
0f:e8:1f:6a:c4:02:9c:ff:dd:5e:30:a9:01:a4:67:
2a:d2:d0:62:41:60:7f:85:26:bd:fd:ff:83:4d:da:
70:93:53:d7:04:74:2a:6d:27:a4:0a:8b:69:28:2b:
d3:50:98:65:f5:ed:87:92:fb:fb:50:ef:48:55:1f:
80:65:23:d1:34:d8:09:4e:30:34:35:2f:35:8a:51:
b0:1d:27:79:45:c4:59:ca:cb:36:54:23:bb:5b:98:
28:93:a7:d2:49:14:58:d1:5d:b3:3b:2f:cb:fe:1b:
62:a2:e4:be:48:74:18:0f:0d:c7:82:12:a9:17:ad:
8b:34:05:e2:3c:d9:f4:a8:f9:0f:46:b1:7d:23:4e:
03:54:ab:d8:3a:55:32:5b:80:81:9c:79:36:51:04:
3e:ae:a5:aa:df:14:d1:a1:ad:0b:5a:2f:f7:dd:a9:
17:cf:75:ef:9d:13:49:d6:c3:11:37:4a:e3:34:0b:
72:0e:54:cf:03:c3:8f:9c:14:84:ec:97:4c:37:72:
89:1a:b3:22:53:64:0f:67:85:d1:0e:8e:dd:23:4f:
e7:fa:2d:2d:23:f4:9e:3e:38:09:b9:ff:7a:72:da:
6a:38:be:a4:32:c7:cf:da:cc:0f:d3:b9:30:03:06:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4B:5E:A8:38:8E:93:24:E1:F4:53:41:83:5C:90:23:DB:6F:B3:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d5e754d-d0a4-3a64-bde9-c622bdfd5b0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:ff:60:a1:f8:13:d6:9b:17:0c:a9:a8:30:80:5f:7c:ec:3e:
20:ab:70:5e:20:28:6c:93:f6:d2:1f:82:dd:e4:7d:e2:3f:20:
13:e9:01:f1:e7:41:55:a1:22:71:ac:87:be:a6:41:58:a6:bf:
6c:22:a5:bc:70:33:d0:26:c4:96:bf:af:f9:7f:9c:a8:67:1a:
26:6b:ea:ee:ba:70:60:43:3f:fb:79:ed:d9:72:91:88:da:43:
4d:25:1e:ee:23:a1:a6:c3:3f:27:b0:dd:13:fb:f0:17:47:1d:
4d:27:97:3a:37:9a:bf:a2:2b:89:8c:df:40:69:c2:42:5d:e2:
f5:ba:e8:a8:ee:3a:1a:e7:67:fb:51:ab:4c:1c:6c:96:43:06:
7f:96:e1:ec:0e:29:2c:67:b7:da:57:e1:be:7d:c3:79:5e:b0:
a1:b5:30:c0:99:5c:49:47:fb:5c:b5:53:7b:c3:f1:09:a2:29:
00:b8:cf:00:75:ce:f3:be:df:89:91:48:31:b5:94:9d:5c:99:
d5:62:84:05:99:a5:5d:0e:df:c9:ea:8f:c8:60:5c:cf:a2:e2:
3a:bc:5b:ac:0b:dc:bd:a0:68:7c:c4:87:9d:d9:0c:6f:5d:96:
71:42:2f:81:26:9b:96:6e:c6:e2:2f:94:51:97:89:04:65:e9:
94:b6:8a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:12 2025 by rpki-client