Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/368b9e1e-7f89-3d8d-b35b-4a0d1f5312fa.roa
File: 368b9e1e-7f89-3d8d-b35b-4a0d1f5312fa.roa (raw, json)
Hash identifier: vU1W4B5bk7ZK3YC3GFzuf3jyapffHapl3y10DyTjcsQ=
Subject key identifier: F1:02:13:14:63:63:B7:61:6D:5F:2D:AE:09:99:17:9A:61:10:E2:BD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213432A0613F79F474C6E1C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/368b9e1e-7f89-3d8d-b35b-4a0d1f5312fa.roa
Signing time: Sun 09 Mar 2025 10:20:40 +0000
ROA not before: Sun 09 Mar 2025 10:20:40 +0000
ROA not after: Sat 07 Jun 2025 10:20:40 +0000
asID: 855
IP address blocks: 142.134.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:32:a0:61:3f:79:f4:74:c6:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:40 2025 GMT
Not After : Jun 7 10:20:40 2025 GMT
Subject: CN=206652ad-d872-4404-80ba-6d26d91a5d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:6e:75:06:ea:f0:92:dd:1a:0c:f8:ef:15:
26:55:c2:ec:6f:42:ee:67:84:3e:76:96:b3:c7:54:
54:8d:4e:0e:63:11:1a:e9:58:b2:9e:f0:3b:13:10:
22:11:ce:bc:96:db:48:61:10:e4:fb:24:29:d7:56:
6c:78:93:5a:73:ff:ea:8f:a9:fa:89:6a:de:e6:ed:
42:4a:62:ae:57:d0:00:46:29:88:29:c2:02:e8:b2:
e6:f5:fa:ea:db:8e:32:23:b4:d3:76:41:c1:a9:63:
af:7c:6e:d2:b9:d2:30:52:5a:3e:af:f5:5d:d6:01:
cd:39:bd:11:c6:b5:83:8e:01:0b:5b:52:4c:28:e3:
21:f5:0c:e9:2d:16:a0:e0:63:30:ee:01:2c:fd:9c:
c1:90:82:85:4a:37:e8:dc:79:8b:00:89:e6:ec:42:
fa:c9:15:ae:d6:df:e4:71:52:2e:96:c4:34:ca:c8:
8c:52:b4:52:04:20:a0:a4:fb:50:6b:b2:df:dc:2c:
ce:60:94:63:82:e0:f2:e0:39:2f:5f:3a:4e:8d:5e:
65:85:2c:d0:5e:c2:af:f1:3b:23:12:8b:5c:cc:5e:
a6:28:32:97:ba:54:38:6d:39:a7:34:39:1b:41:aa:
17:0b:c0:7b:82:74:35:d8:73:20:7d:07:dd:70:76:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:02:13:14:63:63:B7:61:6D:5F:2D:AE:09:99:17:9A:61:10:E2:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/368b9e1e-7f89-3d8d-b35b-4a0d1f5312fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.134.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:b6:f9:73:26:1f:8d:ba:6f:b5:ec:61:be:1a:08:eb:34:c9:
1a:4f:32:2a:67:67:61:1c:dd:ba:c2:ca:94:33:52:66:9e:1a:
a4:f0:1b:01:10:2c:c0:df:d9:52:53:10:11:1e:b0:65:81:d6:
2c:f3:24:c3:84:d1:9e:aa:39:32:e6:8c:7c:1e:3b:96:f4:42:
b8:35:d3:d5:b3:f3:a3:70:ec:0b:f6:01:65:02:4b:45:85:a4:
5b:da:53:7e:79:a4:fa:d1:90:91:fe:df:67:19:5a:9f:04:f6:
29:ff:18:ef:81:41:68:0a:0e:e2:59:4d:03:d3:1c:fc:e4:1b:
94:8e:01:4c:01:3d:f8:2f:cb:98:e1:36:7a:3b:42:6f:4c:27:
9f:8c:37:5f:40:e4:8e:a4:aa:71:7f:75:d6:f8:d0:aa:73:99:
12:02:fd:f6:00:ae:b0:0b:b5:f7:87:8c:c6:be:89:ed:9a:c6:
47:13:d8:94:bd:75:4f:cf:38:2e:b8:92:df:38:02:f6:c6:66:
ad:5a:b8:76:bb:a3:06:cd:69:60:56:c4:33:ed:e7:67:3e:b7:
f8:4a:27:e2:e8:3a:a0:e6:88:ed:b6:ee:fa:14:61:ca:82:35:
fb:4f:70:6c:b6:48:08:0f:bd:34:9c:67:fd:82:09:a9:5d:46:
5b:8c:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:33 2025 by rpki-client