Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3852b27c-c37f-3e13-8de9-c7966050a25a.roa
File: 3852b27c-c37f-3e13-8de9-c7966050a25a.roa (raw, json)
Hash identifier: Z0EuOPDu+yCq/1d+k62prCzmbOc6fsHSKC9xuFtevSo=
Subject key identifier: 02:3D:FF:C7:E2:51:79:E6:5B:0F:11:67:15:51:C2:61:C6:82:68:B3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B73EB90BCA4CDF1DA65E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3852b27c-c37f-3e13-8de9-c7966050a25a.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 32747
IP address blocks: 207.179.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:3e:b9:0b:ca:4c:df:1d:a6:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=65ec07da-9cdf-4838-973c-b11d0e4b43ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:46:6b:19:db:c4:78:21:97:4e:f3:8a:e2:
29:df:ef:20:55:f4:18:32:80:26:13:02:31:68:4b:
0d:7d:a3:dd:44:c0:51:fe:1b:8c:90:09:c4:6e:4c:
bf:67:ed:7a:91:e9:3e:be:6b:91:64:05:17:2e:7e:
37:a3:e3:49:9a:09:5b:97:88:31:f0:83:6b:67:0e:
bb:c5:9d:61:9b:40:00:e7:78:ec:90:c9:55:e6:4c:
0e:0b:27:db:99:07:b4:81:49:03:17:cf:25:ab:4d:
74:b8:e2:32:63:3e:7b:33:df:24:56:d4:ee:29:e3:
37:f8:c2:db:d3:c1:b4:c9:84:3a:b2:bc:43:3d:32:
68:08:dc:85:19:30:31:3f:25:0a:fd:27:f8:a0:89:
7e:eb:34:ba:6d:80:41:d4:da:09:1b:31:97:7d:b0:
f4:fb:86:0e:a7:67:1c:ab:3c:75:0c:f1:85:a8:51:
2d:18:ed:34:0f:89:4b:72:19:de:18:d3:54:4c:48:
f6:29:0e:47:c4:31:8a:04:91:b5:9b:55:98:06:39:
72:04:9f:2e:ca:81:b5:cc:61:cf:2d:22:97:bf:96:
d7:fc:75:65:13:72:74:74:77:ec:5a:fc:9a:9e:0e:
ba:9e:1c:3f:fe:25:ac:df:d8:99:c6:d3:5d:3c:89:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3D:FF:C7:E2:51:79:E6:5B:0F:11:67:15:51:C2:61:C6:82:68:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3852b27c-c37f-3e13-8de9-c7966050a25a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.179.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:4e:ab:7c:5d:f2:31:9d:88:9e:1e:24:ab:37:bd:ab:7a:ee:
cb:7c:66:97:9c:1e:fb:12:e5:e1:a7:28:75:13:b0:d0:9c:e1:
ac:6e:03:cd:c0:7d:65:2f:0e:52:a2:0a:53:96:19:05:dd:50:
a8:c8:62:aa:fd:63:8b:40:42:b7:50:21:30:61:36:ba:c7:ce:
63:aa:ca:f1:46:35:7b:87:ae:5d:29:6e:0b:13:8a:83:6e:1b:
a5:ce:9d:62:d5:2b:21:91:bd:54:5f:aa:6b:2f:17:9b:11:6a:
93:e0:c0:74:94:4d:c4:c8:27:c0:86:de:ae:1e:c5:3f:cd:06:
81:ef:4f:6e:4d:10:98:46:67:8d:22:27:12:ab:0d:c2:58:a1:
9b:e1:14:c8:6e:1c:22:3f:aa:45:9d:ee:84:b6:bc:3f:4e:95:
8a:11:ea:fc:89:b6:a2:c1:16:40:04:41:0e:bf:83:f8:34:89:
bf:f8:67:e4:1d:64:eb:b6:e9:ea:bc:5a:4d:19:6d:f7:d4:d0:
db:dd:26:54:50:1d:d6:6d:ec:c8:10:f8:3d:86:e4:00:c1:12:
12:61:ad:57:1d:ff:00:fc:bf:2b:a5:ff:c1:eb:0c:f5:f6:9f:
83:16:c9:ab:57:5d:ba:68:11:ea:52:4d:77:15:04:2d:99:38:
89:7e:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:57 2025 by rpki-client