Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/33ae2b75-0ff9-3b6e-84c1-991d808edf1d.roa
File: 33ae2b75-0ff9-3b6e-84c1-991d808edf1d.roa (raw, json)
Hash identifier: kdTuCQbdUxfSMwdpx40gzcgMeIsvX5WKDxIp2Zw1j78=
Subject key identifier: 96:CA:56:22:7E:A9:1A:63:78:C8:17:41:9E:40:B2:7F:9C:F3:AB:19
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921346856CFA557CDB156AD00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/33ae2b75-0ff9-3b6e-84c1-991d808edf1d.roa
Signing time: Sun 09 Mar 2025 10:21:06 +0000
ROA not before: Sun 09 Mar 2025 10:21:06 +0000
ROA not after: Sat 07 Jun 2025 10:21:06 +0000
asID: 14112
IP address blocks: 216.6.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:68:56:cf:a5:57:cd:b1:56:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:06 2025 GMT
Not After : Jun 7 10:21:06 2025 GMT
Subject: CN=af5d1464-c6d5-45ee-8e79-bae29700cf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:82:67:1d:04:15:d3:b4:5a:55:09:d6:5d:
a8:0f:cd:13:aa:51:7c:d8:f1:cd:9f:5a:29:d6:48:
24:84:e8:ae:b1:08:70:2f:30:6e:c2:bd:9f:fb:be:
78:cd:0e:b8:c3:d0:58:d0:5a:b8:03:d8:f7:47:5b:
c5:4b:f6:00:9d:de:ad:a8:b0:f8:b1:1d:53:8a:3e:
d1:ed:c1:5a:18:f9:bd:6c:fb:fa:09:ca:e8:89:cf:
5e:2e:68:f3:7a:b0:fd:24:2f:78:77:7c:55:46:a5:
a8:9b:bf:19:fc:db:b9:4a:04:36:f6:ce:57:37:08:
ac:49:a2:14:d2:c4:92:2a:fc:27:f4:bc:3f:d0:3a:
47:40:2b:02:f1:97:18:98:f3:40:42:0f:87:50:f4:
1b:5f:65:3e:16:68:b1:06:c6:16:d9:6e:d5:79:6c:
78:c6:5b:2f:6e:9a:c1:13:ee:74:1d:e8:57:78:d2:
96:c9:a4:8d:e6:cb:ce:20:74:a1:18:cf:56:69:16:
6d:df:7a:c5:09:3b:f3:e9:4c:52:f5:a7:5e:c0:cb:
aa:cf:1f:c9:b7:50:13:58:62:87:96:f1:05:dd:bd:
23:d1:1c:6e:63:23:a9:a4:1c:8f:b1:62:33:8f:63:
aa:b8:19:53:d2:aa:a1:6e:80:2a:3e:14:0f:24:93:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CA:56:22:7E:A9:1A:63:78:C8:17:41:9E:40:B2:7F:9C:F3:AB:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/33ae2b75-0ff9-3b6e-84c1-991d808edf1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.6.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:9b:e1:d4:2c:eb:64:36:fa:66:7f:bf:05:23:43:43:c3:ed:
c8:54:9d:c2:18:65:87:12:4e:b3:56:61:34:52:42:b8:da:b3:
ec:85:2a:99:c1:27:4d:24:e1:44:5b:e3:47:0b:11:b3:62:99:
4b:06:8d:5e:15:74:f4:29:a1:d9:af:ef:b0:41:a6:cd:ef:e1:
db:33:dc:16:4b:8e:b1:50:fb:fa:fb:2d:c5:41:79:73:43:94:
1e:c6:f9:49:71:2d:43:7f:11:ba:5a:6d:d9:a6:36:f9:d3:26:
cc:e7:b5:f4:d4:75:34:09:cd:c8:38:f4:94:19:d0:30:71:f0:
51:b1:7a:f9:92:4f:b3:07:03:05:fb:f9:62:00:1c:a7:1f:5c:
61:36:8e:9c:70:26:d2:b4:89:b1:d6:e6:d4:23:76:58:71:87:
a3:8f:15:c8:6c:e1:f9:d3:19:3f:54:cb:55:96:c7:e9:ad:d0:
e2:90:9a:ba:fa:2e:ba:9a:87:9e:9f:2f:b4:42:cf:f6:62:45:
13:de:c5:b3:43:60:15:f6:64:d7:fc:4e:b7:b9:81:3a:92:12:
3f:3a:73:1e:1e:37:0c:24:3b:37:3e:ec:df:ba:c1:d8:f5:4b:
9e:97:04:4a:e1:f5:0a:fe:0c:28:d0:21:c1:4e:95:62:d9:d3:
15:85:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:45 2025 by rpki-client