Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/300e5b98-f975-3fa3-b627-6542ef451dbf.roa
File: 300e5b98-f975-3fa3-b627-6542ef451dbf.roa (raw, json)
Hash identifier: Am1jbRVsgqUEs9x4p9smqSl68OioxS8Es4MM5YtbZT4=
Subject key identifier: 06:9C:9F:0A:A7:A9:65:D2:E0:0F:61:A0:3C:48:36:BF:23:3A:31:52
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5423A4D5CBE04BED66680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/300e5b98-f975-3fa3-b627-6542ef451dbf.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 70.31.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:42:3a:4d:5c:be:04:be:d6:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=c56d8e86-9047-4d3f-86a3-694d463d3d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e5:3d:51:f7:54:71:29:64:81:1a:3a:20:0a:
d7:26:fe:ff:f1:17:bd:55:59:1a:65:8e:51:7e:31:
e0:43:42:aa:a6:68:13:8b:d4:2f:69:e1:74:93:1f:
24:72:46:b3:22:f7:22:c3:89:9e:ea:56:41:67:53:
c5:05:c7:8e:ca:87:34:cb:bd:28:ed:ce:87:e9:ae:
16:8c:6c:a7:76:63:0c:78:63:80:e0:bd:c5:8f:92:
63:35:4b:2e:ba:b2:26:6b:0d:95:e9:d3:d5:5f:e7:
b4:64:65:a5:d8:45:21:00:c3:b8:8b:f4:80:f3:b1:
dd:b5:23:44:f4:29:ce:6d:1d:7c:b4:97:69:bd:db:
80:d7:b8:5e:e5:2c:16:67:39:9b:2a:6c:ba:dc:11:
e7:8d:40:4d:f0:26:e8:3c:4b:81:8e:42:41:22:a7:
03:33:8c:07:e5:22:e2:ce:59:ae:3a:3e:cc:28:a6:
68:16:5a:05:53:48:27:9f:03:4b:ca:31:42:ee:a7:
1f:5f:a7:c5:7e:50:a9:29:d5:62:76:52:fe:89:79:
ef:dd:21:b9:d2:8c:be:54:bb:77:e1:3e:8f:0d:0b:
f7:a4:c2:5a:c7:49:9c:64:1d:00:7d:49:fc:1d:c5:
e2:4e:8f:86:d6:5c:f9:6b:27:4b:a7:8e:f9:77:85:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9C:9F:0A:A7:A9:65:D2:E0:0F:61:A0:3C:48:36:BF:23:3A:31:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/300e5b98-f975-3fa3-b627-6542ef451dbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:73:63:0d:32:40:41:27:27:c6:ed:ec:b8:3a:a3:fb:37:8a:
93:d8:ec:90:26:63:78:1d:6c:d4:1f:01:0b:67:8d:96:17:91:
82:f4:bd:5f:6c:f8:03:e0:47:c6:0f:ab:4d:22:b5:00:01:bf:
f9:70:86:9d:4d:37:00:aa:a1:3c:de:ed:4e:49:8d:d4:73:fa:
ba:32:43:db:72:65:ff:c0:ae:09:1a:5d:47:55:d5:38:53:f7:
0c:80:70:78:b3:97:bf:50:d9:65:6f:7c:6b:af:ff:78:8c:e6:
a9:3f:e9:da:3e:a9:b3:11:e6:c9:ae:20:0f:2d:1c:bd:ba:3d:
07:31:89:c4:a7:ba:c0:c9:47:74:b5:90:b9:3f:8f:30:61:a8:
0d:f7:69:83:c4:0a:80:69:5b:6c:ad:79:d5:a9:40:de:64:5c:
92:b6:47:fa:74:fe:c5:53:1a:53:ef:a6:ab:14:f1:79:4a:8d:
1c:aa:4f:5b:4d:67:08:2a:2c:a9:7e:6e:30:ad:be:16:10:a5:
80:18:83:31:aa:d1:b2:55:c2:a7:f4:d3:54:ef:ac:62:d4:e7:
3d:33:47:14:dc:18:8e:4f:fa:b2:6e:42:74:2b:0c:fb:d9:7e:
0c:ec:7c:e1:c4:f4:14:56:ea:f2:4a:77:7a:03:d7:a5:28:f8:
1b:ba:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:31 2025 by rpki-client