Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f3749fd-9687-3d6d-9d52-164a8ef5f34d.roa
File: 3f3749fd-9687-3d6d-9d52-164a8ef5f34d.roa (raw, json)
Hash identifier: W8+03S8qQTMWQlFieB69iDxjA4W7mI2uY7sakGcDmRE=
Subject key identifier: 8A:62:BC:6F:10:6A:8A:19:CA:56:15:9A:CA:7D:F7:81:11:97:A1:8D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5AFFD0109BEDAB6F367E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f3749fd-9687-3d6d-9d52-164a8ef5f34d.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 174.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:af:fd:01:09:be:da:b6:f3:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=fe6e48b5-ad41-4d8b-9551-6768495c531f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6d:44:c9:e3:52:90:d6:8b:46:a4:3b:b0:39:
b8:5b:1d:6a:3e:a5:7b:ae:79:2d:e4:7b:41:9a:3e:
c0:08:bc:f3:a1:f5:14:15:2f:27:50:b2:1b:29:80:
74:66:d4:a6:52:c4:4c:b4:26:cd:c8:5d:44:3b:33:
5c:6d:81:1a:f5:00:a8:75:1c:ca:81:54:d3:f7:64:
66:ef:f8:57:a8:54:be:64:9b:a5:79:95:5b:ea:48:
19:e2:c0:4c:ae:ef:d9:9e:f3:57:f4:a7:65:a7:5c:
1b:9a:77:cf:07:ea:63:1b:89:1e:12:7e:d3:77:5f:
4a:b3:f1:88:b7:6b:f7:65:fb:8c:a9:0d:8e:0a:4a:
26:5c:03:e9:2d:89:e5:7c:55:6a:32:8d:37:6c:d0:
34:7b:d2:6e:63:45:e1:95:3b:2a:70:e5:c2:56:99:
52:f7:66:49:96:76:82:8b:3e:19:be:41:c6:71:be:
f4:a4:63:2c:f3:d4:d4:97:83:ce:e8:96:f5:73:6a:
14:f9:c9:be:68:bc:d8:39:b7:32:5a:81:9b:8f:21:
b3:cf:cb:84:2f:4a:86:44:e9:cd:7c:ab:9e:5d:41:
18:09:83:28:26:9b:f1:1a:d1:60:5c:66:9a:6d:f4:
b3:62:c4:2b:98:9d:38:d8:2a:b4:5c:f5:c8:ec:08:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:BC:6F:10:6A:8A:19:CA:56:15:9A:CA:7D:F7:81:11:97:A1:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f3749fd-9687-3d6d-9d52-164a8ef5f34d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:6c:45:e7:3f:7f:74:32:d1:99:9b:a6:f8:d3:03:03:d1:07:
fa:f0:d7:ef:a3:3d:bf:8a:01:00:ea:39:60:76:5f:4b:91:bc:
93:9b:b7:77:a8:d7:a9:67:d9:bd:00:1c:2f:2c:8b:29:2b:f6:
27:6f:db:b7:e8:47:6b:eb:53:f1:7e:06:68:65:47:22:3e:a6:
eb:2e:fa:72:6c:86:16:a2:9e:ff:34:67:7a:85:49:f6:24:6a:
b4:dc:67:8c:79:90:57:fd:a7:6f:f8:d6:76:39:ad:39:9c:4b:
82:d5:ab:19:e2:2b:cb:ef:8c:af:32:fe:3c:21:cc:e0:c1:03:
cf:83:2c:3f:96:ac:78:f0:10:9b:cc:b0:62:e0:db:5e:a9:20:
fb:96:7b:e5:72:bb:cc:8a:c9:7e:0d:47:fd:17:a4:51:42:7d:
0d:eb:c0:a0:a3:1b:9c:17:43:ff:1e:6d:f6:bc:19:13:1f:d0:
69:15:3b:b7:46:75:b4:93:0e:49:ee:30:0d:41:a6:ea:f1:69:
ef:7c:91:31:72:78:d9:30:1d:b6:7f:dd:1b:bc:87:8e:e8:76:
da:6e:a5:ca:08:64:85:f0:e1:99:34:b0:f1:dd:53:53:13:60:
68:b2:a7:e9:01:5a:a9:15:88:cb:a9:83:94:ff:71:a5:a7:10:
26:45:98:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:51:48 2025 by rpki-client