Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dad9ca1-9ff7-3805-a4bd-643828fdf97a.roa
File: 1dad9ca1-9ff7-3805-a4bd-643828fdf97a.roa (raw, json)
Hash identifier: La//VjYghn3LnW1r737stJZ0xM3EGn+ISN93+6Rosls=
Subject key identifier: 48:02:1F:62:D1:3F:27:7A:99:BE:07:45:2A:E0:79:DB:7C:A3:9D:8E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213456DD5F9AB5A9B51B9540
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dad9ca1-9ff7-3805-a4bd-643828fdf97a.roa
Signing time: Sun 09 Mar 2025 10:20:57 +0000
ROA not before: Sun 09 Mar 2025 10:20:57 +0000
ROA not after: Sat 07 Jun 2025 10:20:57 +0000
asID: 15321
IP address blocks: 207.164.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:56:dd:5f:9a:b5:a9:b5:1b:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:57 2025 GMT
Not After : Jun 7 10:20:57 2025 GMT
Subject: CN=64e844a1-91eb-4008-80c4-301f11baafb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:f4:18:0a:69:ef:bf:66:3e:eb:73:40:14:
db:8d:26:5c:d2:9b:c5:55:ba:70:28:06:6e:b5:cd:
43:84:25:3a:22:10:22:c2:e4:85:d5:07:6c:b1:86:
4b:ca:c4:1e:1f:d6:4b:c3:ae:01:78:8a:85:d3:0a:
78:a6:6c:f7:26:77:a6:a4:79:9c:a5:d9:d0:88:7d:
93:6d:78:5a:eb:b3:2e:ed:02:2c:dd:49:b4:28:19:
e8:3c:35:ce:02:71:47:ff:84:0c:eb:f0:cf:c7:a2:
63:b4:f7:76:fc:24:59:94:0d:3b:59:f7:8e:0e:3c:
72:0a:b2:87:2b:b7:98:2f:8b:d7:03:6f:d8:01:16:
99:39:c0:9f:86:c9:dc:ff:85:a5:01:d0:70:a4:57:
bf:37:b8:44:ab:f6:82:1a:2a:7d:51:71:9d:24:ce:
7f:4b:a0:af:ce:96:aa:9b:1c:8b:af:85:b2:6f:2f:
06:27:0f:54:cc:d2:49:e8:3c:b8:0d:9a:59:7b:f8:
20:1e:23:4c:c0:d5:0f:6e:7e:d5:61:2a:4b:10:85:
76:7c:dc:98:7b:e7:5b:eb:41:ee:36:44:00:dc:b9:
bf:dc:89:b5:5e:dd:80:9f:52:29:5c:c6:26:b2:fb:
48:70:00:b0:dc:64:02:09:02:be:49:57:69:7c:e4:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:02:1F:62:D1:3F:27:7A:99:BE:07:45:2A:E0:79:DB:7C:A3:9D:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dad9ca1-9ff7-3805-a4bd-643828fdf97a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:31:e7:89:1f:97:b5:8b:75:90:90:ba:e5:45:58:a1:8b:e1:
82:5d:8f:12:8b:01:bc:88:74:25:16:b0:1e:28:ed:ec:7a:09:
d6:a7:1b:37:57:03:9a:f4:f9:87:f2:b6:19:0a:6e:c0:5f:5d:
43:d3:7b:e4:76:a5:d7:2c:5a:c5:d3:7e:ca:04:06:85:8a:fc:
98:db:bf:f3:4e:79:49:b3:0f:40:db:d6:8c:24:ba:55:37:39:
27:0d:ab:d9:11:a9:01:3e:94:d3:1f:f5:d9:7c:65:82:94:04:
87:b6:fb:a5:a9:98:94:b5:ff:ff:12:3b:fc:16:97:2c:e8:e1:
d0:ae:d0:b6:2b:bc:08:45:92:70:96:f4:28:66:16:2d:bc:f8:
52:df:7b:4a:75:fe:7f:2b:a1:82:8f:ed:87:1f:b5:7c:0c:78:
92:29:8e:ef:e5:33:d8:20:56:39:92:4b:32:b1:85:72:fd:f5:
89:ad:25:81:a3:9f:92:5d:72:e3:f3:db:56:df:ff:c8:b5:83:
de:ec:3e:b5:60:37:f1:e4:70:2f:2a:c3:6f:61:65:1e:00:87:
91:fe:80:28:29:aa:3f:f9:32:77:71:a6:29:dd:60:e3:13:e9:
20:b5:91:66:1c:c3:83:a8:20:f3:41:bc:61:71:88:1c:53:f0:
3c:aa:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:49 2025 by rpki-client