Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f9412b4-0099-3656-b05a-17e3d79ee408.roa
File: 2f9412b4-0099-3656-b05a-17e3d79ee408.roa (raw, json)
Hash identifier: Ai3iDbWTimyN5YatiZqT5xQ9D8MwYuou24IN+p6gDZg=
Subject key identifier: 4A:DA:03:25:C7:61:0F:B0:43:65:CE:FC:C6:B7:C5:84:2B:47:68:BF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213451508A04E287C16AE080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f9412b4-0099-3656-b05a-17e3d79ee408.roa
Signing time: Sun 09 Mar 2025 10:20:55 +0000
ROA not before: Sun 09 Mar 2025 10:20:55 +0000
ROA not after: Sat 07 Jun 2025 10:20:55 +0000
asID: 36522
IP address blocks: 207.35.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:51:50:8a:04:e2:87:c1:6a:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:55 2025 GMT
Not After : Jun 7 10:20:55 2025 GMT
Subject: CN=0fac6470-0d65-4053-b4ed-4ebb9dcc8ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:40:63:91:d3:23:c7:7b:de:a1:71:ba:31:
66:21:64:28:f3:6c:b1:73:14:c9:cc:eb:60:c0:98:
73:60:7b:88:27:c9:9b:7e:65:d7:d1:9f:51:9d:c1:
0d:c5:45:88:f7:c6:c9:b4:e1:45:f2:b6:d8:0d:2a:
c4:91:c6:79:1e:06:13:bf:6b:0e:2d:07:85:8d:76:
5c:f6:82:4a:8a:20:63:9c:49:aa:f0:ef:5a:01:92:
81:e0:d3:55:25:cc:04:5f:64:c4:ea:e0:78:be:81:
a0:7a:9b:cc:92:28:c1:d2:b0:80:d8:6f:73:c2:94:
d1:3b:6b:43:4c:5b:ad:17:95:7d:3f:d5:75:79:a3:
69:dc:54:f4:39:02:06:61:39:b1:a2:65:e1:fd:c1:
ad:49:5d:fc:88:01:97:73:f4:94:46:59:c5:7e:61:
b0:2a:7a:df:08:09:9b:9a:57:0a:60:42:c7:de:5d:
fe:58:b7:49:1d:b6:58:a0:ef:02:c1:ef:31:3f:db:
c8:82:5b:95:c0:15:d1:b1:44:40:d0:9f:a1:80:84:
cf:f9:d3:ba:9c:be:b7:fa:a2:46:68:fb:15:0b:89:
69:bc:cb:31:39:5f:3b:e8:28:78:04:b7:b0:cd:2a:
b8:45:27:ea:18:76:e8:11:f6:8c:1c:45:31:23:df:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DA:03:25:C7:61:0F:B0:43:65:CE:FC:C6:B7:C5:84:2B:47:68:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f9412b4-0099-3656-b05a-17e3d79ee408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:2a:88:96:cd:3c:59:fd:4e:eb:9b:6c:ae:f4:32:77:17:ba:
a3:48:cf:4c:b8:df:ea:fb:cf:a5:4e:8c:4d:1b:06:7a:54:49:
d1:96:7a:8d:36:00:59:ae:4b:27:ba:60:77:55:05:9d:d3:36:
4c:84:f0:c5:22:bc:0c:5f:61:30:d2:30:29:e1:b8:73:65:1d:
f1:88:0b:e4:b7:27:cb:d6:87:a9:ae:cd:f3:67:32:1b:f7:bf:
ef:43:ee:f6:18:1d:31:aa:2c:0c:91:07:e5:d1:72:94:6b:0d:
f5:b1:2d:96:cf:79:8e:07:5e:8a:fa:70:4b:86:f4:7e:01:38:
62:4d:1f:ff:70:6c:06:74:ed:a5:43:cd:1d:b4:9c:4c:82:7c:
4f:a3:c3:46:9a:e5:3c:98:66:44:44:a3:7c:2f:3e:ab:65:d5:
f1:49:3f:f0:4d:6f:34:2d:b3:98:cb:a9:f9:38:c8:c2:77:39:
30:9f:35:b9:02:2c:3d:5f:17:79:2e:83:75:17:64:4c:ce:72:
3f:01:5a:07:65:2e:e7:45:1b:ce:15:16:4e:46:92:6d:64:72:
08:39:59:d3:7d:6f:ec:50:61:94:c0:e9:71:30:e5:9d:55:01:
8a:5e:79:1b:50:fd:92:46:0a:66:93:d8:f4:a1:23:56:5a:a1:
5b:23:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:36 2025 by rpki-client