Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/370b9081-b97c-30a1-b0e5-2e8a625b1f3c.roa
File: 370b9081-b97c-30a1-b0e5-2e8a625b1f3c.roa (raw, json)
Hash identifier: 9s+kyd6C1e0Yp2K+A2ZrtTpfPmidEyZm0PjdtgYVoqE=
Subject key identifier: 08:57:F6:82:F2:C7:53:70:4D:79:20:72:8D:B6:61:A0:65:A4:27:3E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B58C3DD18E5D9EB56D8F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/370b9081-b97c-30a1-b0e5-2e8a625b1f3c.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 142.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:8c:3d:d1:8e:5d:9e:b5:6d:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=c803cad0-7c7c-4669-a5b3-be48edeee081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:f7:33:06:f4:87:91:ec:fa:a0:62:85:a4:
22:2f:f4:3e:2e:a8:4c:e8:8a:0a:e9:b1:18:a5:18:
a0:ff:d2:bd:bb:7f:2e:e0:f6:ad:cf:d4:ef:af:20:
c8:12:53:e9:7a:52:e4:ba:96:e0:05:7f:19:4a:ae:
18:a8:96:3a:0e:a3:33:9c:8f:c6:06:8a:30:b0:26:
ec:92:f5:1a:b4:4f:82:a2:cd:42:b1:17:25:e7:73:
2b:7c:79:f7:f4:63:75:02:9b:73:66:e9:97:32:cd:
1d:7e:35:b2:c7:39:4d:d1:98:98:51:e7:99:7e:a8:
1e:15:88:bc:23:df:3d:8c:e5:61:0d:57:6a:de:c3:
e6:5e:55:ff:71:a3:cc:7b:09:bb:c6:d2:e8:05:e0:
a7:36:a5:89:9e:03:92:13:30:f2:b8:47:71:1c:dc:
99:0b:c5:44:d7:46:3b:25:7c:5d:b5:16:b3:da:3e:
f4:73:f3:53:6d:1d:dd:e3:da:84:ce:f3:c7:24:55:
0c:d3:3d:5e:20:f9:3b:87:b2:fa:f0:0c:05:1d:c7:
21:db:53:ba:8d:89:88:8f:f2:5c:73:91:1f:5a:db:
55:a4:5a:40:d2:5d:8b:34:b6:35:9a:45:e4:77:61:
7c:13:75:80:c4:5a:f9:12:34:ae:d8:d7:ef:29:91:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:F6:82:F2:C7:53:70:4D:79:20:72:8D:B6:61:A0:65:A4:27:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/370b9081-b97c-30a1-b0e5-2e8a625b1f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:95:26:86:f8:3c:6c:dd:d3:e9:5c:cd:2c:54:dc:c6:b9:ab:
e1:05:94:3c:43:27:18:bd:9c:6a:a3:3c:4d:dc:5b:33:0c:00:
94:de:66:bd:98:86:87:ac:1e:b2:e6:db:a4:b5:ce:3a:b2:f2:
8f:c6:43:f7:33:df:a0:34:a0:0c:87:e2:e0:ac:e6:98:00:fe:
b8:80:6f:86:81:57:87:c6:61:76:e9:a4:8d:6b:7f:14:60:27:
68:4a:96:65:39:19:46:cd:ae:57:ca:af:79:16:fb:2d:28:81:
4a:37:0e:83:9b:fb:79:ed:4e:17:98:50:af:89:d0:5c:d8:07:
b5:59:cc:fe:13:d7:27:50:40:8b:ed:fb:e9:8f:cd:8a:38:a4:
f9:30:00:4b:6e:c4:95:48:d3:ee:ac:a9:b7:a9:db:e2:89:74:
12:4d:e2:09:27:52:85:27:ca:f5:56:d9:66:5e:58:9e:c4:39:
63:2c:11:36:27:f5:ba:62:43:73:66:25:08:73:15:fa:7d:08:
62:3f:f8:0e:be:dc:5e:92:bf:d7:48:ca:1d:b0:e6:70:67:bc:
4c:65:7c:f7:d7:ce:84:63:fc:a8:a9:d9:44:02:ab:46:41:6e:
fd:f3:9f:16:f9:45:f7:e7:8c:f3:48:71:10:30:16:f0:66:b1:
54:de:e1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:38 2025 by rpki-client