Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32dfe81f-1c64-3768-8242-923c42d366c8.roa
File: 32dfe81f-1c64-3768-8242-923c42d366c8.roa (raw, json)
Hash identifier: LEQJsBfghJqzYELzETLYqbWBGyc02NE6mVY0KmXQeD8=
Subject key identifier: A6:38:A4:40:30:ED:EC:3F:10:C7:2C:72:E3:BE:25:A0:E3:41:93:35
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134516B1638666457553780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32dfe81f-1c64-3768-8242-923c42d366c8.roa
Signing time: Sun 09 Mar 2025 10:20:55 +0000
ROA not before: Sun 09 Mar 2025 10:20:55 +0000
ROA not after: Sat 07 Jun 2025 10:20:55 +0000
asID: 36522
IP address blocks: 207.35.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:51:6b:16:38:66:64:57:55:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:55 2025 GMT
Not After : Jun 7 10:20:55 2025 GMT
Subject: CN=fba1eb4a-aa26-4f7b-8f6a-0deea3269cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5d:26:ac:f6:a2:67:90:5c:84:48:f2:2a:9c:
e5:ee:fb:90:58:87:46:94:9f:f0:12:48:fd:0f:19:
7d:45:4a:e7:1d:2e:d6:96:a5:aa:a8:49:36:f7:33:
3b:59:3e:38:d6:73:c0:f6:86:e8:49:a0:22:86:8e:
a9:ce:36:92:db:14:90:5b:80:3e:0b:48:b8:aa:d3:
16:34:5e:5d:67:fc:35:0c:06:48:c3:d9:4e:d9:47:
5d:c8:0a:0f:49:31:0b:fe:e5:8f:82:d6:2d:7b:74:
b4:4c:1b:8f:35:1b:9d:7f:e4:ec:ca:77:3e:47:ae:
f4:8a:a4:06:0c:c6:0c:51:34:7c:70:de:f0:6f:c9:
db:a4:73:2f:ed:0c:9f:11:a7:a0:10:21:cd:92:48:
c6:de:04:e6:2b:c3:98:57:ef:2c:0a:80:51:bf:dd:
32:e3:2f:da:b2:30:02:fc:8e:4f:a1:7d:98:2e:dc:
85:c7:25:26:b8:3d:bd:62:dc:df:1f:52:97:8d:11:
b0:93:ff:5d:eb:a3:cd:09:66:ca:db:6c:fa:5e:87:
8b:f6:79:ca:da:fd:f2:f3:18:f6:95:7e:71:c6:e7:
ec:67:1f:64:cb:f8:29:5d:cc:47:24:74:5f:5e:77:
16:ec:0d:d0:5f:86:23:ad:de:fd:d7:41:9b:19:ad:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:38:A4:40:30:ED:EC:3F:10:C7:2C:72:E3:BE:25:A0:E3:41:93:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32dfe81f-1c64-3768-8242-923c42d366c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:b6:bb:ee:91:cf:57:df:bf:6a:05:9c:33:68:71:0a:6e:32:
15:68:b5:51:57:b2:00:58:6f:46:ab:4f:ad:91:d2:da:e9:d8:
9b:3c:4c:6c:70:b4:12:63:81:fc:b1:d0:a1:45:71:5e:7c:1a:
4f:ea:4c:1d:42:e0:2c:67:64:d9:e1:9b:73:c3:40:f0:59:d9:
6a:fe:d3:94:d9:a6:d8:e4:04:83:24:bc:aa:59:01:1c:14:26:
6b:f5:53:56:95:4c:f2:42:0e:66:f9:9b:f9:de:06:29:cf:f9:
e6:d9:ab:30:aa:ae:8a:4e:98:d3:38:51:86:40:08:63:3c:3b:
c7:a3:b3:ac:82:a4:ee:90:46:74:ae:1c:7b:88:1a:77:61:0f:
c5:0a:03:d9:ca:74:60:f9:42:06:73:83:04:97:ce:1c:31:a3:
03:63:c0:e1:4a:07:84:8b:92:fe:d0:c8:83:e1:e1:f4:79:30:
20:47:b4:e8:16:6a:1b:99:28:78:fc:0c:d2:64:1f:04:73:fd:
8a:9f:52:76:99:60:ce:55:29:c4:3a:a3:5a:41:eb:a7:f9:9c:
65:e9:57:36:1a:9a:f8:10:2f:44:fe:da:db:f0:50:b7:27:b4:
a1:bc:eb:5c:2f:71:c2:e3:2f:de:4f:cb:0a:23:76:8e:4d:30:
c9:b5:89:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:35 2025 by rpki-client