Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34423bcd-740a-3c03-a949-af49748b22aa.roa
File: 34423bcd-740a-3c03-a949-af49748b22aa.roa (raw, json)
Hash identifier: bgWU9KMDbwgqqSXLO06pmzurBfsIghxmEG/9VSHHqwY=
Subject key identifier: FA:8B:EE:19:2F:16:D7:92:DD:63:FD:95:4B:B6:B3:AA:4F:76:59:14
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134430ABF7291C533EF4320
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34423bcd-740a-3c03-a949-af49748b22aa.roa
Signing time: Sun 09 Mar 2025 10:20:48 +0000
ROA not before: Sun 09 Mar 2025 10:20:48 +0000
ROA not after: Sat 07 Jun 2025 10:20:48 +0000
asID: 21723
IP address blocks: 204.101.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:43:0a:bf:72:91:c5:33:ef:43:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:48 2025 GMT
Not After : Jun 7 10:20:48 2025 GMT
Subject: CN=e99c35bc-21c2-4eef-93d6-2ec20ec98e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:cd:61:51:8b:65:cb:05:93:38:c2:78:9d:
4c:2f:9e:46:0a:b9:1b:38:84:6b:05:5d:ca:c7:a9:
34:a1:20:4a:6e:ec:23:f4:cf:2f:80:38:6c:d2:a4:
75:38:12:ff:18:4f:a4:79:76:19:d3:0b:20:07:ee:
af:bd:17:ee:ae:11:18:57:39:94:96:dd:f9:ed:1f:
81:2c:ad:98:94:55:80:f3:d5:fd:ce:91:63:75:e4:
34:af:7d:34:06:d0:73:99:f7:b3:7f:ee:f4:0b:d3:
52:0a:40:19:1b:3e:03:00:48:62:07:32:a0:31:7c:
8b:30:76:a4:2c:62:71:63:5d:c2:c9:18:fd:0a:e0:
27:80:11:ea:11:06:7d:4e:1a:47:ef:89:76:15:37:
9d:9f:e8:df:e1:1d:c3:52:81:3f:d9:82:f8:e0:8f:
82:8c:91:da:c1:9b:3e:9d:fa:a6:33:c4:52:cb:91:
59:b9:44:05:1f:5d:3d:4b:87:12:d3:01:2e:89:9f:
cc:7c:4a:39:a7:73:93:21:b5:7f:22:6a:39:ca:58:
a6:97:d2:38:b5:71:31:5e:fa:e4:0b:29:af:96:77:
a2:8c:6e:a4:8e:d6:46:01:d9:71:f8:be:d5:7c:a9:
1e:35:4c:01:44:23:a2:05:f2:8c:a7:f7:c0:f6:0d:
5b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8B:EE:19:2F:16:D7:92:DD:63:FD:95:4B:B6:B3:AA:4F:76:59:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34423bcd-740a-3c03-a949-af49748b22aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:bc:47:df:06:c7:b4:c8:7b:cf:99:64:8f:ea:f3:e5:93:8f:
13:52:64:09:6c:d5:e6:22:aa:e4:d7:cf:01:9d:fd:5c:3c:98:
80:44:bb:cb:e6:76:05:98:50:16:d3:de:b6:1b:6e:b7:81:3e:
d7:37:c1:ca:71:81:c5:4b:e2:d9:0e:a9:b2:7c:ec:33:60:0d:
ae:9f:20:af:c4:7a:8b:3c:f7:86:17:4a:c6:07:3a:f4:0d:19:
ea:9b:40:9e:97:72:dd:35:4e:cb:76:2e:db:b7:1b:63:70:35:
74:20:ff:24:e5:68:b4:06:33:59:09:a3:8a:08:dc:c7:ea:4f:
02:3a:a7:d5:3b:f9:f0:28:97:9b:67:c3:1a:14:63:7d:7c:60:
9a:50:a8:2a:4b:0e:51:5d:e3:8c:9b:e1:39:93:92:e6:bb:06:
7a:87:14:d3:89:3c:0b:4d:01:ab:82:6b:48:20:51:7d:b7:ac:
5d:e3:44:75:eb:17:db:74:6e:ad:e9:36:9a:b4:e3:eb:12:c3:
32:21:6b:d6:dd:38:bd:10:ea:be:5c:f0:5e:ab:62:47:00:16:
2e:f2:63:3d:90:9d:8e:23:58:4d:87:1f:51:2d:b4:3a:77:74:
ca:36:db:76:05:a2:ac:5a:cc:43:cb:eb:90:99:9a:58:00:58:
86:e6:3d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:04 2025 by rpki-client