Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36a47e5d-61fc-37e5-9342-53926e6424e0.roa
File: 36a47e5d-61fc-37e5-9342-53926e6424e0.roa (raw, json)
Hash identifier: nBvLyPSDtCf4aLNZ7ao/cOSJsXvCJ4b09v2cUovqc+s=
Subject key identifier: 4F:DB:3F:16:A7:DA:D4:FA:36:A7:5A:E9:04:2E:87:40:25:F7:AE:0D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285840C1D3E9934E415734A2C4A9C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36a47e5d-61fc-37e5-9342-53926e6424e0.roa
Signing time: Mon 30 Jan 2023 12:00:00 +0000
ROA not before: Mon 30 Jan 2023 12:00:00 +0000
ROA not after: Tue 02 May 2023 04:00:00 +0000
asID: 577
IP address blocks: 67.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:d3:e9:93:4e:41:57:34:a2:c4:a9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 30 12:00:00 2023 GMT
Not After : May 2 04:00:00 2023 GMT
Subject: CN=f3acc974-5310-4634-8b52-4ebc28f9704a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:bc:49:c0:eb:2d:d6:8c:32:36:dc:b6:cf:
db:69:0b:fa:c1:91:a2:4b:3c:19:fe:03:fa:78:f5:
9d:3e:36:c9:70:95:16:2c:2e:3f:92:10:e2:9c:01:
7e:51:af:73:5d:61:fd:d0:ef:30:cf:46:65:53:69:
3c:4b:f3:f3:23:89:6f:52:ea:a8:49:20:6e:63:f9:
10:35:3c:54:39:9b:5f:2f:37:a7:2b:7c:52:f1:81:
ec:c4:98:68:d5:80:16:60:ad:b8:40:37:eb:63:10:
a0:ea:69:fa:ac:12:a3:95:e2:01:eb:84:8a:2e:84:
83:57:97:17:96:f5:c3:f4:9f:4d:73:d1:23:23:32:
c1:bf:b2:eb:19:7b:a9:9c:3b:23:a6:29:03:ab:43:
d5:af:8f:47:7c:ba:8c:62:a7:46:dc:46:70:a7:bd:
26:98:a5:57:98:0d:4f:a7:eb:0a:3a:60:01:e8:17:
e1:76:5e:5c:ae:c4:85:87:22:91:fd:0f:e1:3a:56:
79:75:c5:ff:fd:98:6c:04:99:68:cb:1d:38:34:76:
81:e3:41:ca:03:d0:06:f9:47:91:d5:41:7e:7f:d4:
b7:16:2c:70:9f:52:b2:25:fb:81:94:76:30:9a:ff:
19:db:2b:c6:e6:a5:4b:b3:b7:2d:7c:9c:05:28:19:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DB:3F:16:A7:DA:D4:FA:36:A7:5A:E9:04:2E:87:40:25:F7:AE:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36a47e5d-61fc-37e5-9342-53926e6424e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:c0:65:f0:4c:79:ba:3d:c1:eb:16:80:40:b8:ff:58:f6:88:
76:fe:cf:fd:97:ef:95:69:23:1e:f9:cd:c9:86:ce:c0:d2:47:
57:5c:a5:02:d5:8f:88:76:59:b0:13:20:14:f9:c9:2b:c7:47:
f7:59:5e:cf:df:8b:a7:11:aa:e1:a0:39:4e:64:c0:61:d1:df:
dc:67:8b:81:68:8b:a7:32:f2:99:ec:72:03:db:b8:e4:aa:51:
2a:59:bc:dc:2a:66:f8:40:aa:ca:b1:e3:b1:59:d6:bd:d8:43:
ab:00:fe:82:67:ea:5b:9d:b9:d4:82:06:5a:0f:4c:1c:b4:55:
b9:29:52:a0:a1:7c:03:b0:81:8a:33:15:29:36:e3:33:41:19:
cd:b5:78:55:66:af:4b:c5:a9:b7:80:13:60:4f:e8:e4:39:96:
85:39:27:9a:e4:51:b8:21:73:e8:2e:cd:97:39:32:ab:09:83:
72:a8:fa:b7:89:22:3c:55:b8:83:77:2e:dc:21:92:2c:32:c3:
41:ec:55:e8:ed:61:8e:d9:68:d1:97:48:ab:af:df:ba:24:44:
f7:b7:75:b4:a4:00:e4:ed:ca:37:94:ea:71:79:d3:aa:7a:17:
17:cd:39:c4:3d:68:0c:06:4f:f8:90:62:62:1d:c2:14:a8:07:
6d:d4:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:09 2025 by rpki-client