Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dc1836b-ecb1-3ccf-965a-fbe19ba1f2ad.roa
File: 3dc1836b-ecb1-3ccf-965a-fbe19ba1f2ad.roa (raw, json)
Hash identifier: Gn1QA4/3AtBnWg662tG4Vo370nxVD1cW9ZwfYA55EXg=
Subject key identifier: A8:04:4B:A9:97:9A:23:BE:9B:FD:02:AE:38:30:5A:5A:2C:3B:F8:5B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213463B397476C710FFD62C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dc1836b-ecb1-3ccf-965a-fbe19ba1f2ad.roa
Signing time: Sun 09 Mar 2025 10:21:04 +0000
ROA not before: Sun 09 Mar 2025 10:21:04 +0000
ROA not after: Sat 07 Jun 2025 10:21:04 +0000
asID: 21723
IP address blocks: 209.226.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:63:b3:97:47:6c:71:0f:fd:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:04 2025 GMT
Not After : Jun 7 10:21:04 2025 GMT
Subject: CN=384840eb-170a-4eda-9828-a6ac7e9fdea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:2c:fe:fa:69:4b:b5:b5:9f:45:97:ae:19:
d7:aa:d2:52:13:27:00:3d:9d:f2:cd:db:7e:6a:8a:
8e:2e:07:c0:86:72:96:c4:f7:10:e4:b0:78:f0:af:
b1:7f:d1:f9:8b:c2:eb:99:d3:dd:f3:8d:86:1a:6c:
bf:9d:8d:98:c7:70:94:6a:32:29:d9:ff:ef:02:d6:
13:36:c4:c1:1e:16:87:1c:90:87:c0:4c:ff:f3:72:
16:34:45:53:e4:22:0f:42:1a:e5:b9:7c:44:36:d2:
8a:59:d4:43:39:c9:59:01:08:cb:2e:9e:39:fa:b8:
65:7c:cf:c3:e5:6f:a3:ba:69:a5:23:9c:08:5c:d4:
b1:ce:e7:05:29:d0:91:94:98:51:e6:50:e5:3c:54:
ff:5d:a7:70:ea:8e:3c:15:9c:46:f1:6a:14:fd:59:
db:57:47:a0:15:29:20:d5:6b:12:63:a8:75:55:9e:
1f:ba:4d:e0:e3:55:ca:ac:25:66:29:01:4c:28:f3:
97:99:97:a7:f7:ad:65:aa:27:92:cb:f9:a4:d4:63:
10:2b:09:db:8d:e5:2a:07:84:f0:0f:61:83:c8:f9:
dd:d9:b2:c7:4a:a8:26:e5:5b:be:74:f5:b6:1c:ae:
22:94:e5:54:f8:2c:45:63:ea:d8:8c:5d:69:20:13:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:04:4B:A9:97:9A:23:BE:9B:FD:02:AE:38:30:5A:5A:2C:3B:F8:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dc1836b-ecb1-3ccf-965a-fbe19ba1f2ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:34:32:98:d8:a7:80:17:b9:19:72:15:fd:e1:f2:de:20:9a:
0a:ba:9b:e9:8f:8b:c1:2a:c9:ff:7c:98:50:25:91:a8:55:fd:
94:6e:ca:fb:7a:c8:07:ca:0e:6d:2b:50:8e:8a:b3:bf:8f:2b:
b8:f6:a3:b1:95:5b:f3:52:b9:13:75:f1:da:cc:1d:ef:d0:88:
d7:57:86:40:af:58:25:72:4c:86:55:73:8d:f4:b3:bb:77:8d:
63:20:ee:0e:4a:96:5d:f0:98:59:29:56:31:53:2a:db:91:b5:
00:ba:6c:a2:55:9d:a8:53:18:6d:ef:6e:db:2a:50:e3:d5:e2:
a6:a4:a9:b8:75:69:99:ba:d2:29:44:1d:02:8e:b3:84:e7:44:
a3:ad:d8:93:ba:1e:5f:5a:bd:ef:6a:f9:91:7f:5e:19:8c:14:
03:46:c6:ab:13:19:7f:19:b6:66:c3:4e:76:5e:ca:b7:13:d9:
29:9c:ba:07:1f:3b:b3:1d:a5:1a:2a:55:33:8c:0c:fb:13:39:
0b:2d:a4:ef:e7:14:35:26:ff:c3:67:fa:db:12:39:4a:d0:e6:
15:94:8f:89:ec:7b:cc:cf:17:33:c5:f6:77:15:74:f3:79:94:
66:a6:4f:b6:b9:a9:98:05:db:f5:09:ce:ab:7f:80:6f:22:e3:
ec:94:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:57 2025 by rpki-client