Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21fddaf7-3978-3014-b1ba-6dbfa626832d.roa
File: 21fddaf7-3978-3014-b1ba-6dbfa626832d.roa (raw, json)
Hash identifier: VhiLuN2ges0aXnInpQKhsA6lAJOU/MdVqoDEvZTGgSI=
Subject key identifier: 39:65:2B:66:AB:7E:E7:A5:6B:7F:00:19:EB:DC:FD:DE:45:B0:36:2F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29BB343731C2FF02ECD560
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21fddaf7-3978-3014-b1ba-6dbfa626832d.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 21724
IP address blocks: 204.101.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:bb:34:37:31:c2:ff:02:ec:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=88fa0f13-c804-4de7-a3b8-ed9102359041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:e1:21:3b:d8:54:5e:18:63:2f:59:bb:14:
a4:c0:38:26:fc:c3:95:b8:c4:61:f8:1d:9b:c5:7f:
61:da:34:ec:17:8c:5a:c0:f2:3d:0a:97:94:f4:4e:
e8:f3:c4:87:2f:bb:b1:03:fa:25:4c:94:19:5e:4d:
23:1d:9c:0b:f1:0e:e0:52:2d:51:b2:5e:a4:08:ce:
f1:a9:2d:71:5f:78:f4:a5:db:4f:6b:97:06:61:29:
82:a8:a2:fb:af:ae:8c:98:ff:3b:6e:40:d6:15:b0:
39:bf:6a:64:7a:8e:43:9e:7c:28:40:f9:a1:13:fc:
07:64:91:00:b2:8a:87:b2:4f:19:22:5d:20:62:d2:
bd:ff:8b:53:b5:a7:b1:4c:44:98:e3:a4:4a:f5:66:
47:c8:dd:9b:0d:10:73:f0:1f:ec:05:89:20:0e:a1:
77:30:9a:27:4e:03:7c:35:a8:6d:b7:b5:67:87:af:
eb:9d:bb:ac:6c:b2:3a:5f:55:1e:9e:aa:c8:40:4e:
7d:5c:36:3b:e6:c1:4d:5a:73:ad:76:43:57:a9:b2:
70:ad:89:ea:77:ef:32:d1:a0:77:fb:00:a2:1b:c7:
aa:42:e1:95:14:0a:68:c8:ef:f2:97:4e:86:d1:ef:
b7:cb:64:f6:eb:68:a3:2c:e5:e1:86:96:c4:aa:96:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:65:2B:66:AB:7E:E7:A5:6B:7F:00:19:EB:DC:FD:DE:45:B0:36:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21fddaf7-3978-3014-b1ba-6dbfa626832d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:88:5a:f8:00:5d:73:fe:96:44:7f:b1:72:2a:94:20:a2:dd:
b6:91:a4:6b:30:40:3b:66:83:3e:2b:ab:78:04:24:67:58:90:
ba:f3:2d:4e:19:e3:c6:dd:16:32:c3:43:bd:a4:a3:a2:ba:74:
b4:81:62:41:7a:37:66:0f:19:a3:1c:ff:6d:99:ad:38:0f:b9:
c2:02:9c:5d:03:a0:03:f8:c6:2d:36:86:61:38:70:5b:a8:19:
74:dc:d5:49:e2:d7:b1:29:19:4b:a7:33:ae:40:05:56:29:76:
b5:c1:36:1c:8d:a6:0c:58:fd:ce:ca:57:a1:f0:bc:7a:1f:b6:
02:47:bc:07:2f:0e:c3:ef:84:07:99:5e:60:0d:65:08:e5:bc:
66:d9:39:f3:3a:15:33:3c:47:39:8a:cd:1e:44:1c:12:12:b9:
89:f2:c6:3b:41:b0:82:dd:59:60:a6:4e:72:07:46:f3:c8:55:
1b:01:05:1d:b4:cd:5d:de:d3:d6:a0:ec:33:4e:05:fc:fd:66:
03:2d:00:03:00:23:40:b2:10:b5:c1:a0:84:c7:f4:4c:69:4d:
e7:73:04:95:23:1f:59:9a:11:0f:0e:d9:a7:82:77:2a:de:b3:
e4:d0:8e:ce:09:13:39:9e:d4:ab:a3:90:9e:71:74:d2:a6:a2:
62:31:91:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:19 2025 by rpki-client