Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/48188358-a2a7-3ebd-ad6c-3a6b9408470f.roa
File: 48188358-a2a7-3ebd-ad6c-3a6b9408470f.roa (raw, json)
Hash identifier: bmcPdorsGEp2OscAHkt+QvYMWsTYGwCD5Ygm0OeI59k=
Subject key identifier: 09:D1:18:D7:67:4B:58:89:BA:2D:D7:A6:35:33:D3:05:81:FD:06:00
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921345B316E5ECB307E4D9780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/48188358-a2a7-3ebd-ad6c-3a6b9408470f.roa
Signing time: Sun 09 Mar 2025 10:20:59 +0000
ROA not before: Sun 09 Mar 2025 10:20:59 +0000
ROA not after: Sat 07 Jun 2025 10:20:59 +0000
asID: 577
IP address blocks: 207.231.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:5b:31:6e:5e:cb:30:7e:4d:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:59 2025 GMT
Not After : Jun 7 10:20:59 2025 GMT
Subject: CN=30da5db3-0bde-4631-a67d-63839132020d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:11:72:9e:77:7a:a8:d4:a0:dd:f2:27:01:
eb:05:fa:7c:02:98:38:7d:23:b8:33:5e:b9:25:df:
a5:26:e9:e9:4c:43:6c:a4:b3:ef:bf:e5:74:a5:45:
ac:06:74:7f:eb:8e:53:53:a7:bd:39:cf:c3:f8:8d:
a4:89:16:f3:89:28:00:b5:1c:cd:51:97:55:e3:3a:
25:fb:82:8f:09:35:40:38:4e:72:54:f2:11:87:fb:
de:c7:45:f5:be:4c:34:bf:5d:27:19:c5:52:8c:a6:
ee:e3:34:18:06:e8:5c:f2:5b:6e:dd:58:08:96:0c:
fa:63:2d:f8:aa:42:81:63:64:fe:00:93:e1:7c:c7:
44:ec:2b:f6:e3:41:9d:53:03:ae:7f:51:10:65:a1:
f2:02:02:4e:a8:da:8d:9c:24:ff:f0:ff:9c:5e:fb:
b6:ea:a4:c7:60:cd:b5:aa:61:b0:24:91:aa:11:5b:
80:09:ca:c6:d2:ed:b6:ef:9a:50:41:04:b7:2d:d5:
de:b9:97:3e:49:c7:a8:e3:bc:10:9b:93:3a:ec:61:
05:f8:1e:56:db:c3:04:66:5d:b8:1c:c2:88:3e:6c:
1c:79:43:a8:9c:12:aa:cb:59:c2:54:42:4a:db:59:
f4:75:fc:b0:2c:f9:19:8c:57:aa:ab:39:3b:89:c8:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:18:D7:67:4B:58:89:BA:2D:D7:A6:35:33:D3:05:81:FD:06:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/48188358-a2a7-3ebd-ad6c-3a6b9408470f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.231.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:3e:fc:3b:2d:94:03:56:28:67:c6:7f:a8:d6:06:17:0b:ca:
3b:0b:01:8e:d5:5b:fe:ed:a1:e0:5a:22:6a:c4:8d:7f:da:3e:
f6:79:a9:d1:cd:1d:2d:fe:04:e2:c7:35:79:a8:26:f1:06:1c:
0a:64:ff:34:72:ae:99:76:6d:78:39:67:cd:d3:87:0a:95:da:
c6:36:81:51:4d:7c:2d:5a:86:ac:32:c2:26:34:5c:f8:be:b7:
58:59:ae:01:ee:83:ad:cd:f1:da:28:50:80:90:06:d3:e8:a3:
9d:5b:98:b1:91:78:ae:4c:15:17:bc:4e:1c:8e:67:24:29:e1:
f9:80:96:9b:8a:59:03:46:61:5b:1b:12:0b:b9:80:df:1b:eb:
bc:a6:9a:fe:2c:02:07:45:cf:ec:a7:47:b0:56:2a:81:f9:d6:
be:a9:0d:07:51:45:85:eb:1b:26:b1:fd:c4:ff:5b:a2:93:a0:
41:8c:df:94:06:9c:6c:2f:88:85:49:88:18:20:f4:ec:74:75:
85:91:03:7a:a8:5c:9b:be:fc:60:7c:c7:4e:1a:36:9e:60:e5:
f9:07:fa:72:09:5f:78:c5:d2:45:11:34:e0:51:af:8a:f7:6b:
fd:fb:d3:79:a8:6e:6b:06:3b:3f:c4:ac:12:bc:e4:a0:15:0b:
ab:f1:30:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:42 2025 by rpki-client