Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b596219-5882-33fb-a301-4248203665d7.roa
File: 2b596219-5882-33fb-a301-4248203665d7.roa (raw, json)
Hash identifier: 1tBJ21g6KKXRSij2RNg6xdE64WtjBPW3Ahyd4MCLsP0=
Subject key identifier: 33:D8:E0:16:E9:72:0A:23:B2:C5:56:02:09:A0:AF:48:C6:FC:19:19
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29FDE6CEE6B7AB11048600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b596219-5882-33fb-a301-4248203665d7.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 204.101.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:fd:e6:ce:e6:b7:ab:11:04:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=829663ff-add6-4276-a7b7-2d0d3cb16482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:dd:c9:20:01:4a:5c:35:49:00:97:42:a9:
ff:79:d2:95:57:c4:fd:55:dd:31:e6:18:c8:76:61:
06:11:ae:48:bc:08:a0:30:6f:44:38:62:ee:97:da:
4b:24:ac:a1:30:8f:0e:ad:a0:8d:e0:37:b7:5b:b8:
85:9e:d9:e6:91:a5:db:d8:dc:62:eb:b7:45:74:c4:
6a:25:14:0c:34:c1:97:51:88:d0:57:fa:d1:79:38:
a7:8d:e5:b2:50:9d:90:17:8e:b5:e6:42:41:dc:4f:
57:71:5a:77:63:9d:b2:4e:e6:10:03:d2:de:0a:47:
b8:af:8a:42:6d:28:6c:fb:99:dd:68:04:f0:2b:be:
c2:53:dd:ba:94:54:ae:be:71:e6:46:99:a7:35:b1:
a2:53:e0:62:60:25:54:38:ad:0f:d0:f8:09:1e:d6:
a8:72:4c:21:04:f0:9f:5a:55:a9:13:a5:53:89:f2:
71:c0:77:64:58:db:34:e1:69:f8:29:d7:31:74:9f:
eb:36:e1:68:f0:e8:d4:f0:e8:04:9c:b3:b2:72:9b:
de:2a:52:74:e9:18:be:66:ea:f3:fc:a4:75:c0:76:
a2:1e:44:5d:4c:a2:2c:c9:de:a6:dc:d9:aa:c8:72:
cd:0e:c1:ca:05:aa:3f:44:21:e3:94:3f:a2:c6:f3:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:E0:16:E9:72:0A:23:B2:C5:56:02:09:A0:AF:48:C6:FC:19:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b596219-5882-33fb-a301-4248203665d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:1d:c4:02:6f:71:7c:c5:50:b4:11:a0:27:8e:f2:af:c7:c5:
17:6f:f5:5e:04:00:da:cd:ad:a8:99:d2:e4:00:59:85:64:8e:
ef:e7:ad:b6:af:47:35:4f:ed:f0:09:77:38:9c:17:62:58:bf:
9d:b6:36:c3:d1:0b:b7:e9:d5:1e:32:a8:3d:81:c2:f1:15:d6:
0d:8d:8d:b3:bf:ab:f6:b2:99:6c:56:76:80:9c:58:ed:43:c2:
4c:05:e9:35:e4:77:b2:ce:ff:99:60:7a:50:3d:c2:2e:41:7c:
e2:ea:aa:50:57:9b:07:11:fc:dd:92:22:38:d9:43:86:96:05:
de:62:8c:e9:11:93:57:6e:28:09:66:7f:74:52:5f:80:c4:30:
87:40:64:63:b8:82:9e:59:cf:d1:57:e0:5a:c1:e1:1a:35:b8:
12:49:40:e5:ae:28:fc:33:88:54:15:01:78:43:d9:7f:1b:1d:
d6:a4:72:fb:be:9e:22:6f:2a:8e:da:de:bf:68:72:3f:83:1e:
b6:1b:3b:98:10:5f:e1:de:10:68:ad:b2:f3:60:13:bc:e9:2a:
b4:68:f7:a0:8e:9d:ca:fe:b0:b2:31:23:10:61:9e:a5:8e:f8:
9e:e3:87:b4:b5:35:ee:34:33:8c:ea:2e:f8:f6:5f:87:37:fa:
13:df:3f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:26 2025 by rpki-client