Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4edcc8e1-45d6-342c-a72e-9211b87bdfce.roa
File: 4edcc8e1-45d6-342c-a72e-9211b87bdfce.roa (raw, json)
Hash identifier: oye8l/YiRlgolZWfHd60ka9JZxxYHngVmYHGk5pXfAk=
Subject key identifier: 5F:A8:E0:6E:AA:25:4C:C1:EA:43:59:B8:39:2E:CB:93:52:93:74:28
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134606D84F6FD747ADA8600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4edcc8e1-45d6-342c-a72e-9211b87bdfce.roa
Signing time: Sun 09 Mar 2025 10:21:02 +0000
ROA not before: Sun 09 Mar 2025 10:21:02 +0000
ROA not after: Sat 07 Jun 2025 10:21:02 +0000
asID: 577
IP address blocks: 209.71.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:60:6d:84:f6:fd:74:7a:da:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:02 2025 GMT
Not After : Jun 7 10:21:02 2025 GMT
Subject: CN=dc8698bf-1d4e-459b-920f-93547772ef3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:f7:c0:2e:bc:df:ab:92:08:e3:42:a1:4a:
26:c1:4b:b4:02:8a:10:f1:7c:46:35:97:85:df:af:
fc:46:f2:4b:1b:8d:18:b3:54:88:b3:13:fa:64:09:
b2:54:fb:61:6e:0d:e5:39:d3:b8:88:bd:f2:cd:39:
1d:8a:2f:f4:f3:aa:92:4c:40:c7:ed:34:34:13:ff:
ce:88:16:7b:b5:8b:33:fe:f8:c2:95:6e:1b:a5:0b:
f5:7b:70:b5:07:c3:5c:50:81:e7:eb:5a:5e:72:82:
b9:ca:74:75:be:29:c3:10:74:e9:7e:9c:75:52:e4:
1c:25:4a:c8:7c:c7:52:6f:16:4b:cd:b0:eb:da:86:
5a:e3:c1:08:e9:a6:66:cb:cf:7d:08:7e:e7:8d:b6:
b6:dd:f8:a4:f6:ca:33:5c:8d:3a:e5:2c:a8:7f:07:
24:fe:df:ab:8d:54:5d:20:34:73:94:d6:32:d2:01:
db:f9:5b:62:d7:54:42:a3:d6:68:8b:ff:c2:4f:35:
f4:01:35:68:ed:6d:2c:41:88:41:7d:d4:d9:ca:37:
68:18:96:26:10:e4:3a:ff:98:4b:a1:e8:4e:73:0c:
37:41:d2:64:9d:4c:bc:75:ed:02:34:9a:97:f0:33:
5b:87:79:80:b9:da:73:a8:2d:dd:5f:3c:3c:4e:0e:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:E0:6E:AA:25:4C:C1:EA:43:59:B8:39:2E:CB:93:52:93:74:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4edcc8e1-45d6-342c-a72e-9211b87bdfce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:aa:b8:13:dd:bd:94:c2:23:66:c4:33:ef:85:56:f0:69:e0:
f2:d8:bc:ca:8d:62:25:f1:ff:04:3a:49:be:0c:0f:64:7b:25:
a0:a7:2b:8c:0d:1b:70:a2:01:b5:7c:87:dc:50:28:81:b7:b9:
a3:ad:ae:23:c4:dc:59:4e:7d:06:91:6d:e2:8d:55:cb:03:85:
f6:57:46:76:09:3b:99:c0:f6:bf:ca:b1:85:9c:19:a6:77:c2:
1f:68:ce:43:da:73:b7:e4:d7:be:0f:15:70:6f:82:ac:90:6e:
9d:76:68:12:70:12:d4:b0:89:7c:90:ab:fe:b3:94:57:21:85:
91:6f:8e:8b:a9:7d:ba:11:9a:d8:5c:d7:3b:e3:a0:58:c5:e5:
e2:d5:35:25:89:0a:93:3a:91:20:12:19:d0:5a:f3:46:85:c5:
da:49:01:0f:a3:d3:b8:fd:17:81:e0:66:5a:27:62:be:b7:33:
34:f2:55:ed:f6:0e:99:e4:03:59:9f:de:dc:82:cd:bf:ea:86:
68:b6:8e:ba:02:87:2a:c5:37:b5:e6:99:5b:09:6d:06:bc:4f:
48:40:a9:3a:2b:e3:f0:69:c8:fa:9a:e0:de:00:d4:26:5d:4e:
c3:44:bf:82:90:b5:62:75:42:bc:bf:1b:e8:47:28:ca:51:8b:
86:c0:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:26 2025 by rpki-client