Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f04587b-a6ac-38e9-bdbb-e7e550151c38.roa
File: 4f04587b-a6ac-38e9-bdbb-e7e550151c38.roa (raw, json)
Hash identifier: tsiXN4mQhVMCLu8kb6jSfFk0/zqeCorJzl9gmXfP07o=
Subject key identifier: C3:2E:26:8D:FF:2D:2D:B9:75:9B:93:2C:F9:BB:54:D0:D9:C7:89:05
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213425A4CC5472CA88855500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f04587b-a6ac-38e9-bdbb-e7e550151c38.roa
Signing time: Sun 09 Mar 2025 10:20:34 +0000
ROA not before: Sun 09 Mar 2025 10:20:34 +0000
ROA not after: Sat 07 Jun 2025 10:20:34 +0000
asID: 855
IP address blocks: 47.54.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:25:a4:cc:54:72:ca:88:85:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:34 2025 GMT
Not After : Jun 7 10:20:34 2025 GMT
Subject: CN=95870220-cf38-4893-8b4b-14ee345299c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:06:76:59:16:ba:6a:eb:66:14:57:19:20:
55:ef:45:b0:31:b1:32:10:27:f4:2b:64:27:d1:81:
98:8b:ae:72:12:d1:ac:eb:76:40:c4:16:22:f3:0d:
80:aa:fb:a6:28:2c:a9:10:bd:a2:84:9a:73:cc:c3:
9b:e7:09:bb:60:46:3c:b6:27:c8:2b:4e:90:6e:1c:
2a:9d:e4:2c:7e:6a:61:68:f8:3f:1d:c3:88:23:04:
02:d6:c1:1a:a8:50:0f:e4:ec:bb:cc:db:36:aa:43:
8a:b3:2d:03:f9:8e:10:bc:37:9a:30:cd:82:ac:28:
39:19:dc:4f:55:af:ff:a7:72:ab:f2:c5:bf:71:56:
c8:84:73:cf:8e:d0:55:05:0f:6b:30:3d:a4:10:c4:
65:69:69:4a:00:7c:8e:4c:fa:85:8c:d5:bc:5e:7f:
4c:ee:78:d7:ee:e9:d1:7b:5e:77:b4:42:00:a4:44:
89:45:b0:07:99:f1:15:4c:95:be:f2:73:e1:fc:f8:
c2:a7:68:4d:05:f3:29:a8:38:a9:75:55:d6:6e:25:
15:2b:9a:4c:03:79:1f:94:5b:fe:72:62:40:96:b2:
a9:99:34:37:b4:06:cf:95:09:5c:f0:21:e6:82:eb:
02:39:28:0b:35:1d:54:f1:2b:4f:98:37:58:df:d6:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:26:8D:FF:2D:2D:B9:75:9B:93:2C:F9:BB:54:D0:D9:C7:89:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f04587b-a6ac-38e9-bdbb-e7e550151c38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
47.54.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:45:f5:5b:c6:b2:d2:50:58:fd:dc:38:82:a6:da:d2:b6:3e:
75:77:0c:1b:f9:99:81:0c:2f:40:71:8a:97:5a:14:c1:d8:ab:
2b:d6:64:2d:f7:fd:85:ed:01:6e:32:0c:b8:90:b3:e1:9b:d8:
9b:d7:cb:07:fa:5c:83:c9:20:a1:2b:8f:a5:14:2c:0d:a4:33:
94:7c:9e:39:6a:a3:a5:dc:a6:32:dc:b2:6c:f0:7a:b3:e7:df:
fe:52:f3:72:6b:67:95:3f:66:6f:e0:cc:c6:08:59:0d:b4:68:
6d:79:10:54:cc:b7:07:95:2a:f7:ae:85:b4:ff:94:43:37:8f:
8c:93:c9:3e:a9:91:7e:f4:91:30:49:fb:59:18:96:1b:8d:7d:
8d:37:64:21:80:78:5f:17:6b:11:97:75:46:0b:dd:4a:cf:44:
a6:f8:8d:45:78:62:de:7c:b3:7f:51:0b:ab:31:a7:c5:56:45:
42:ae:17:35:0c:4e:e0:53:48:a0:15:b9:3b:06:20:bc:fc:15:
f3:d3:d0:91:04:a0:d1:7b:f7:0f:03:90:78:97:0e:bd:94:8c:
e4:39:b5:0e:73:9e:05:b7:d5:5a:77:bb:cb:cf:d6:4b:03:5a:
bb:df:64:6c:49:27:f5:4f:a7:ae:ea:68:59:ff:bc:31:6f:47:
08:4b:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:35 2025 by rpki-client