Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa
File: 458aa676-e15f-387e-993d-16f00f08f98c.roa (raw, json)
Hash identifier: 9fTOepyxqVQZsTGjbGrK76KrLQoR/PFh9ITVES4W9Z8=
Subject key identifier: 94:65:A9:18:14:27:F0:39:E5:37:F2:A6:77:8D:64:D0:91:27:C1:21
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921346F7327C8D59F0D6EFDC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa
Signing time: Sun 09 Mar 2025 10:21:09 +0000
ROA not before: Sun 09 Mar 2025 10:21:09 +0000
ROA not after: Sat 07 Jun 2025 10:21:09 +0000
asID: 15321
IP address blocks: 216.209.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:6f:73:27:c8:d5:9f:0d:6e:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:09 2025 GMT
Not After : Jun 7 10:21:09 2025 GMT
Subject: CN=db4c84ad-8c8d-4032-be1b-1b39f0a90c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:7a:92:c1:fe:7c:9f:47:34:4e:d1:4f:19:
93:d1:b8:8b:55:50:ab:88:e3:b0:2c:15:3b:41:13:
17:14:b4:e2:82:06:79:17:a1:c7:ab:91:c7:e9:86:
ea:8c:70:61:12:a8:4f:5b:23:7d:f2:a3:d8:08:65:
25:fd:95:8f:d5:5e:5e:41:41:b1:23:1c:62:6c:ab:
af:9c:81:29:50:46:4c:dd:2f:5e:24:a0:2a:2a:32:
5e:61:ad:5f:0a:0d:8c:d8:52:26:6b:67:b0:97:31:
43:2c:12:e6:b1:b4:17:49:28:bf:94:cd:c4:1c:64:
83:1a:ff:4c:b7:aa:b9:d7:88:f0:90:20:c6:35:c7:
4b:32:29:7c:fc:b2:67:b6:3e:f3:47:15:0c:41:d7:
a5:a6:3f:e2:0a:3a:6d:37:c7:7e:2d:76:ba:b3:21:
62:ca:f9:70:20:66:2e:0d:28:ef:cf:04:d3:5f:97:
60:5f:9a:3a:57:da:b3:bb:47:51:b2:ab:9b:53:de:
a6:b0:87:1b:0a:ec:d5:46:f3:e2:a2:3c:44:fd:94:
9b:d1:c1:fb:1a:55:f0:f8:05:cf:93:bd:f6:4d:ca:
e2:b3:e8:9f:cb:5c:8e:cc:7b:47:07:ac:20:56:54:
06:d6:b3:60:c7:5a:76:a9:a0:9d:61:f5:75:9a:37:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:65:A9:18:14:27:F0:39:E5:37:F2:A6:77:8D:64:D0:91:27:C1:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ba:2c:c2:1f:5a:2c:c0:e5:21:f0:7c:80:57:d9:fe:1e:ce:
aa:ae:ed:c6:41:7c:e9:3d:8b:5d:2e:d0:a5:fd:d2:99:cc:06:
85:46:e4:50:7f:20:3d:8b:35:bc:e5:60:2f:a7:cd:96:e6:22:
e6:3e:d1:47:89:26:5c:a7:18:48:5d:3b:e6:1b:cd:fb:c5:b5:
e1:f6:48:ca:ed:d5:1e:27:11:7f:8d:51:5d:f1:4a:98:55:d6:
de:ce:25:2b:6c:9f:8f:f9:a2:aa:bd:68:0e:ff:fb:f2:d9:e2:
51:c7:ab:20:ca:98:c0:64:95:1b:bf:9a:49:42:14:be:4f:c5:
90:e1:95:cc:9e:fb:03:e9:5c:db:68:dd:e2:c2:de:72:12:b8:
6b:18:e7:b3:b7:d6:32:d8:8c:ad:41:98:6f:34:ee:80:7b:61:
5a:44:77:58:71:11:09:05:0e:f1:52:6a:8b:0e:74:6c:d9:93:
ee:9f:b3:94:e4:6d:3e:5f:fc:d3:a3:71:1c:83:02:87:4d:26:
8e:d5:64:7e:9c:ef:80:2a:80:08:f9:a6:c3:5a:e7:78:4a:85:
55:8d:fe:bb:7d:57:f3:2d:c7:2f:56:4f:e5:aa:75:e2:77:fc:
2a:2a:57:59:7b:49:3a:66:eb:2b:6a:af:4d:e2:15:c4:b6:6c:
56:80:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:28 2025 by rpki-client