Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36c809cc-2728-31ed-8762-9fb401e4302b.roa
File: 36c809cc-2728-31ed-8762-9fb401e4302b.roa (raw, json)
Hash identifier: bTS+9WHaSE5zjEEWjUOyUqn+Fda3m5WeyofymXhHRew=
Subject key identifier: AE:F9:FE:70:8B:0E:42:1A:21:C8:09:D3:F8:9E:21:14:1E:A7:86:81
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343663B7D8A4EEBE974F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36c809cc-2728-31ed-8762-9fb401e4302b.roa
Signing time: Sun 09 Mar 2025 10:20:42 +0000
ROA not before: Sun 09 Mar 2025 10:20:42 +0000
ROA not after: Sat 07 Jun 2025 10:20:42 +0000
asID: 32678
IP address blocks: 174.90.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:36:63:b7:d8:a4:ee:be:97:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:42 2025 GMT
Not After : Jun 7 10:20:42 2025 GMT
Subject: CN=c08a0e36-3d1c-42ad-bd1e-712d931738ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:01:7b:9f:1f:83:0d:d0:f3:de:87:73:a8:
38:ce:83:d1:66:1b:ce:7e:3b:27:a5:94:aa:86:cd:
a8:9c:3c:b8:c9:ea:3a:97:ac:fb:4d:1f:3d:00:c8:
01:92:ed:b4:03:74:04:89:b8:4e:fa:d6:cc:49:ec:
1b:84:35:a1:a1:68:4e:a7:9e:b8:ad:71:2b:06:7d:
c4:a5:45:c2:20:9c:d6:bc:f0:40:9e:66:9a:d8:35:
f8:35:06:f1:0f:87:9b:a1:41:c7:32:65:9a:bc:48:
c8:5a:49:c5:68:9d:f0:d7:6b:99:df:fa:69:0e:c1:
bc:a1:54:2b:33:3a:8e:2f:a8:08:86:7e:78:fc:71:
e0:7b:ae:65:c9:29:ed:92:08:9c:7b:3b:82:d7:e2:
49:ff:0f:cd:dd:77:92:16:76:4c:01:08:f8:82:da:
55:ca:5c:39:cd:c7:cc:a2:6a:d4:3b:3f:dd:ea:91:
71:54:72:3e:36:03:23:e6:41:0b:ac:bd:d6:02:e5:
e6:66:d4:01:72:bc:fc:c8:09:4c:7c:ae:84:ff:0c:
55:0f:8d:2f:0b:28:86:0c:94:fd:eb:0b:de:88:22:
04:f2:1b:7b:49:bd:81:6d:ad:44:de:16:31:af:50:
00:12:a4:da:ca:fb:47:83:45:3c:13:cc:44:0f:18:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F9:FE:70:8B:0E:42:1A:21:C8:09:D3:F8:9E:21:14:1E:A7:86:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/36c809cc-2728-31ed-8762-9fb401e4302b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.90.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d7:47:2e:a1:6a:7d:1e:7b:67:b8:84:a3:07:78:7e:6d:ba:
6d:77:a0:91:75:47:52:f7:03:87:23:03:5d:18:34:93:88:94:
ec:f3:c7:44:fd:fa:4b:74:39:7b:28:39:a8:6e:7a:7c:52:8a:
7b:ea:16:36:e7:22:61:f5:a0:f8:17:ef:34:d3:7f:b0:9f:78:
2c:4b:c7:cb:d7:97:d3:8e:a6:86:ca:40:0f:42:ea:55:3a:14:
2b:af:45:ca:ef:11:13:61:bc:e9:a4:f3:9d:b6:b6:57:9b:12:
93:a0:ef:d5:2b:fd:f3:c5:73:d9:df:ee:f6:21:ea:70:b0:b0:
fe:82:21:a5:80:8b:2f:eb:9a:fc:90:4a:02:82:e1:21:39:b4:
8e:85:cb:43:48:81:61:68:f1:d2:30:a0:c0:39:e8:df:9d:08:
75:0a:00:29:c6:73:e0:71:56:e3:b1:97:a4:66:89:79:6a:22:
5b:52:29:5a:4d:7b:f2:3f:d7:31:27:99:6a:1e:91:b8:04:12:
a4:ba:2d:c6:4e:fd:a2:7a:d7:98:28:4a:24:56:e6:f1:f0:ca:
be:53:a9:02:79:6c:bb:e3:32:1c:84:b2:97:e3:eb:fe:91:ae:
25:59:24:d0:14:97:00:1d:de:09:4f:cb:8c:01:00:ba:b3:ad:
5e:28:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:33 2025 by rpki-client