Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dfcefb6-7ae6-3a5a-b680-212f6c642ee5.roa
File: 3dfcefb6-7ae6-3a5a-b680-212f6c642ee5.roa (raw, json)
Hash identifier: b8z+m4sbIP/79Hf/L+w/HIQuAbA/5e8obr1PsZDG3KU=
Subject key identifier: 04:F8:CB:20:1B:14:F1:6E:11:BA:2C:A1:88:5F:19:5C:0C:DF:58:8A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B52BD507DEC9DED9481340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dfcefb6-7ae6-3a5a-b680-212f6c642ee5.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 70.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:2b:d5:07:de:c9:de:d9:48:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=3a78d372-6ce3-41ce-be77-4652a81ddc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:af:9f:8a:17:99:e7:01:b2:0b:d9:ff:ff:
9f:30:63:a7:b7:34:30:3b:3a:44:f3:30:0b:7c:78:
f9:16:ec:48:c8:63:60:2c:01:11:18:4c:12:eb:7b:
93:f9:5b:a1:4d:98:34:52:18:68:b6:cc:8e:3e:29:
4e:e2:73:99:ae:21:b7:ec:34:12:5e:2b:80:e2:b5:
73:94:3e:a5:07:76:d4:55:35:91:51:5d:4d:7b:4c:
e0:ab:21:9e:a3:c2:84:3b:71:96:8b:92:20:dc:3b:
61:00:a0:e9:ab:65:4f:e0:d7:f5:c6:62:ae:a2:82:
7b:07:39:5f:29:ec:47:60:ee:f9:d3:1d:75:75:6d:
70:e7:92:c6:b3:78:e3:30:03:93:09:32:98:9a:81:
a2:96:82:e8:6c:4b:72:59:bc:74:b5:36:55:93:a7:
8e:7d:b1:27:8d:dd:d4:75:f9:61:ea:80:a6:ec:a5:
e2:a1:d7:12:fa:e9:fd:52:78:8d:36:13:c1:83:e4:
2e:b5:5c:5d:8a:bc:ee:7e:6e:18:fe:7e:c7:54:d7:
6a:b0:2e:51:67:c1:45:84:f3:b5:fe:8b:41:da:01:
0e:7d:d8:32:7a:cf:23:22:8b:67:ea:3f:f3:57:98:
9d:21:fa:c2:e1:48:ec:98:f0:53:b3:9c:53:fe:81:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F8:CB:20:1B:14:F1:6E:11:BA:2C:A1:88:5F:19:5C:0C:DF:58:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dfcefb6-7ae6-3a5a-b680-212f6c642ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:0e:b8:b8:92:37:cf:86:63:ed:03:82:9c:eb:1c:80:dd:78:
bb:fd:f9:69:f4:e8:ae:94:71:98:0e:18:a1:75:a5:c2:eb:0c:
9b:53:92:7d:99:ca:ba:23:a8:ed:9b:57:e1:07:c1:9e:cc:66:
f0:46:80:77:31:c8:f7:a9:5c:24:61:cf:37:d5:d9:23:ba:0b:
73:8f:73:ec:34:2b:86:b5:09:fb:64:a4:05:72:27:75:78:db:
c9:82:64:29:58:bd:87:19:e5:22:ee:ed:35:ae:58:a4:66:4b:
19:ae:ab:e7:9d:33:de:ea:70:9d:a7:af:58:af:35:58:c5:be:
a0:23:a4:37:e2:b9:cb:b6:b0:a2:bc:9e:8f:4a:8f:0e:1a:f6:
db:e9:34:6e:32:9a:2f:59:8c:ae:2c:32:9d:da:32:ff:a2:49:
05:d4:69:97:6b:e8:29:44:b1:1e:d9:8b:58:07:b3:5c:c5:d6:
a1:6c:89:bb:53:14:2c:9d:a9:56:2a:25:c7:c1:6d:57:91:37:
1f:f9:33:e4:1e:cf:21:42:2b:cf:1e:de:65:06:4f:09:30:5d:
7b:bd:5c:54:13:35:88:6a:2f:17:68:2e:2b:5e:b2:9b:43:bc:
51:69:18:66:31:77:31:94:27:5e:ee:d3:9c:4d:d7:99:bd:91:
80:c9:6e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:27 2025 by rpki-client