Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42c797ef-5cb1-3fa8-972c-41cb4afce224.roa
File: 42c797ef-5cb1-3fa8-972c-41cb4afce224.roa (raw, json)
Hash identifier: ByUhAtbDNcjl5Sl1mKLDCPjy+D1q6AdIYsTger/unuM=
Subject key identifier: 07:21:D3:6D:9F:46:65:B3:08:2D:91:0A:FD:88:76:0B:C2:29:D1:01
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921342F5FBDE0AB7005E4DB80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42c797ef-5cb1-3fa8-972c-41cb4afce224.roa
Signing time: Sun 09 Mar 2025 10:20:39 +0000
ROA not before: Sun 09 Mar 2025 10:20:39 +0000
ROA not after: Sat 07 Jun 2025 10:20:39 +0000
asID: 577
IP address blocks: 76.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:2f:5f:bd:e0:ab:70:05:e4:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:39 2025 GMT
Not After : Jun 7 10:20:39 2025 GMT
Subject: CN=2ff3c9f9-0e3f-4ca6-bbd1-3eec5a7f04c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:55:45:d8:96:fe:53:44:08:81:60:dd:66:
5d:15:7e:29:d7:bb:73:b9:24:5b:a5:65:30:67:7c:
45:84:c9:80:15:31:f7:b8:d5:95:3c:ce:46:16:a2:
da:00:97:21:cc:b6:90:f0:cd:03:bb:a5:a6:08:4b:
78:06:65:20:11:65:e6:6b:63:b6:65:a6:a9:31:45:
ae:f2:99:16:3e:04:63:02:4e:74:f6:d2:2e:fa:ef:
22:71:bb:b5:60:42:cd:cb:37:4e:83:76:42:ec:01:
6e:f7:82:bb:b0:4a:66:92:39:d7:3c:35:ef:a9:f7:
07:37:23:e8:ae:a8:08:e2:2a:0c:b2:b8:f1:d2:4a:
01:a7:f5:e9:dc:a3:2f:03:9e:6f:57:10:98:18:56:
e3:6d:2a:54:a7:fc:a5:d2:1f:73:52:ab:86:81:c5:
1b:b0:ae:d9:95:af:e3:ef:c8:76:9e:47:f2:bc:59:
32:f7:50:63:de:f5:f2:fb:e6:25:eb:d4:6a:6a:10:
f1:31:5c:5b:6f:42:5d:17:77:bb:7f:40:c0:58:cc:
df:fe:38:d0:4f:08:71:d7:2a:bf:32:52:98:cf:4b:
5c:ac:2f:8c:60:16:83:ea:15:e8:f6:65:d1:e9:be:
76:28:27:ce:4a:48:ea:c8:8d:5f:43:7b:f2:90:ea:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:D3:6D:9F:46:65:B3:08:2D:91:0A:FD:88:76:0B:C2:29:D1:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42c797ef-5cb1-3fa8-972c-41cb4afce224.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3c:40:8b:c1:6d:4b:cf:de:a8:1a:9d:78:51:d5:d5:29:fb:
26:64:8d:fd:5e:85:3b:da:bf:01:1d:4b:50:8c:83:db:b1:a2:
36:54:3a:ec:8d:dc:3f:c9:83:41:e1:55:3f:13:bd:f9:80:5d:
3f:28:a3:be:68:41:86:7d:29:2e:f8:7c:b5:e6:71:ee:9d:68:
13:29:ee:27:50:9e:20:73:4a:b4:52:3c:12:fa:67:c6:61:d7:
18:9e:10:a1:75:39:b4:23:70:b4:6a:ec:08:50:fc:e4:e4:6c:
51:72:ac:b4:e7:de:a3:e5:8b:8d:15:56:50:b5:4e:f2:c7:5b:
e4:14:7d:df:8f:bb:72:38:be:c8:7b:24:8e:f7:bc:cf:78:cf:
55:62:ad:c9:47:60:0c:e1:0f:20:2c:ce:9f:5e:5f:ff:41:aa:
78:92:87:74:3c:81:c6:f1:e9:06:4c:a7:75:5d:4d:b0:36:ac:
85:4a:43:38:43:79:c8:de:18:ec:03:03:28:6b:7e:57:98:a6:
d7:91:4e:3e:5b:7c:12:47:86:ad:e2:29:fe:df:ac:96:7f:90:
3e:d5:27:0b:06:cb:ce:0c:8e:67:c9:07:85:59:92:2d:04:3a:
13:f5:fc:4e:7b:db:68:04:f0:71:79:3b:35:e2:4b:10:38:27:
0d:fd:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:47 2025 by rpki-client