Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c98b7b4-6cda-3852-b836-1c90185d9db6.roa
File: 3c98b7b4-6cda-3852-b836-1c90185d9db6.roa (raw, json)
Hash identifier: bAiZ3RSKt1nt1oQDkSjR4DUux6jeXFM5g7UB1Os72GM=
Subject key identifier: 18:8F:82:57:0C:C1:5C:B2:E4:93:21:11:1D:92:62:20:90:81:A8:8C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213444B9B58FCC352042D1A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c98b7b4-6cda-3852-b836-1c90185d9db6.roa
Signing time: Sun 09 Mar 2025 10:20:49 +0000
ROA not before: Sun 09 Mar 2025 10:20:49 +0000
ROA not after: Sat 07 Jun 2025 10:20:49 +0000
asID: 36522
IP address blocks: 204.101.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:44:b9:b5:8f:cc:35:20:42:d1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:49 2025 GMT
Not After : Jun 7 10:20:49 2025 GMT
Subject: CN=a22126af-5981-425d-98ec-01a57b139241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:50:25:ec:d1:8c:10:32:f3:da:95:6c:ec:
32:a8:74:90:20:74:6d:4c:64:8c:0a:e9:a7:eb:82:
20:8e:1d:53:4b:40:31:6a:6f:17:bf:85:d8:c4:3a:
41:52:fc:f6:ca:b9:7e:78:fb:96:27:df:ff:28:ab:
15:c0:59:a1:36:a4:5b:b8:a0:67:52:af:c4:b0:3e:
3b:cf:f2:50:43:65:c7:85:cd:cd:83:a3:ff:ea:59:
28:90:09:7e:d4:6b:d6:3e:3d:8f:50:21:03:d0:a9:
c9:5a:92:79:1f:0c:2a:a1:56:dd:bc:c8:5c:b8:07:
94:b9:11:af:6c:20:a3:45:b1:15:14:fc:bc:78:2e:
5a:85:ae:1a:83:5f:4f:2d:0a:13:2f:b0:11:61:2e:
74:be:f7:1d:b6:8c:de:3c:fc:9b:78:7b:d8:8c:61:
47:b2:5b:8a:ce:17:d8:37:cd:2b:57:68:1a:5c:9d:
4b:c6:0f:a2:e2:9c:24:5d:41:ef:6f:f0:4c:43:e6:
38:ec:76:4e:2f:e9:26:e4:54:7e:14:e5:ac:47:27:
a6:04:e6:22:74:f0:36:09:a1:87:f0:b2:03:5d:ca:
27:19:ee:fe:e0:b9:cd:93:54:87:24:4f:48:70:a2:
e7:3c:ef:48:99:dc:61:e5:76:84:52:fa:76:2a:ac:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8F:82:57:0C:C1:5C:B2:E4:93:21:11:1D:92:62:20:90:81:A8:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c98b7b4-6cda-3852-b836-1c90185d9db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:f3:a9:5f:bd:4b:43:30:ae:0f:69:e9:e8:65:e5:3a:8d:8b:
9a:a9:2d:69:f3:c2:2d:19:70:ce:a6:f7:7e:af:50:93:ea:50:
05:7c:c1:98:4b:53:b1:cf:c7:5b:dc:6e:74:03:45:2c:72:44:
b4:46:ec:bd:df:81:59:00:6c:61:05:35:f0:43:52:2d:f2:60:
00:52:56:2b:39:46:6a:a0:1b:a5:71:62:b4:ce:fb:04:8b:12:
13:27:83:4d:22:78:a7:b2:50:36:7f:87:72:9a:b3:5d:8c:8b:
98:7e:81:04:f8:80:1a:56:59:0f:87:b1:a8:cc:f7:1a:99:c7:
34:92:d1:60:9b:0b:a3:1d:e3:4d:1b:95:e8:2a:61:0b:81:d2:
ac:c5:22:af:3e:7f:cc:5c:5f:6a:83:48:f6:97:73:1e:ad:ed:
34:a4:f7:34:c8:72:e5:22:d8:4c:be:02:22:f2:f4:d5:8c:aa:
54:5c:05:d7:bf:cb:f0:a9:40:1a:c9:ec:9b:c8:9b:32:52:a1:
55:09:14:8e:12:95:a9:9f:5b:1c:f8:6a:98:99:d5:e9:b7:21:
09:52:a5:9d:35:b7:f4:6e:f1:8f:0e:3e:8e:f3:5d:1c:e1:a1:
af:5a:f7:b1:ed:77:49:db:87:80:f2:72:fb:8d:13:79:f1:80:
06:0d:58:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:14 2025 by rpki-client