Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50fa619c-b5ae-3c2d-a793-cd67260c0cb3.roa
File: 50fa619c-b5ae-3c2d-a793-cd67260c0cb3.roa (raw, json)
Hash identifier: 9gE2QI7fLtNkiUDrndl+apUbmwNj0Ml17DHsenCjE7k=
Subject key identifier: C7:57:1D:99:59:20:8A:57:8E:A6:B5:34:68:3E:8F:E4:74:2F:FD:D4
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213442ED7A4BA0350B1607C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50fa619c-b5ae-3c2d-a793-cd67260c0cb3.roa
Signing time: Sun 09 Mar 2025 10:20:48 +0000
ROA not before: Sun 09 Mar 2025 10:20:48 +0000
ROA not after: Sat 07 Jun 2025 10:20:48 +0000
asID: 21552
IP address blocks: 204.101.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:42:ed:7a:4b:a0:35:0b:16:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:48 2025 GMT
Not After : Jun 7 10:20:48 2025 GMT
Subject: CN=4ce59853-1af4-4113-b4b6-e9864e63f4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:d9:98:3b:30:1a:5a:9d:94:70:cd:26:f2:
0e:96:b8:13:21:e8:6c:48:94:47:ad:a0:4e:c8:e0:
27:d9:64:19:08:e0:d0:5e:6e:13:1a:ec:d7:77:91:
93:04:f7:6d:2b:0e:4d:c2:b7:5d:95:68:fb:49:9f:
fd:8a:ca:f8:65:24:e4:20:d3:2a:3b:bb:c1:f3:8d:
29:d0:cf:3a:7c:c2:a9:1e:24:8e:1d:9b:62:d3:8b:
f3:63:32:f1:72:cb:fc:7a:d4:8a:33:6a:d1:0e:45:
44:b6:d1:32:b9:27:f1:4a:c2:65:41:ff:36:fe:02:
47:81:77:99:ae:92:dd:7a:f6:ec:4f:e3:00:25:11:
82:ac:85:74:5b:ad:48:f9:8a:82:67:c4:b1:91:5d:
a2:72:fb:f5:77:45:82:38:77:4d:60:cc:17:0c:55:
7a:3b:d6:8f:04:b4:23:21:ae:e3:39:37:0e:e2:51:
d7:3d:3a:cf:59:e4:9a:a6:c6:42:a4:89:ae:75:69:
b2:fd:d7:4a:dc:9b:4e:59:e1:1a:ee:cc:da:63:38:
e3:14:ed:d1:87:81:19:42:52:92:fd:97:b3:fd:57:
8e:5f:62:97:18:ab:2e:c8:ec:d8:8b:03:d9:a0:39:
bc:a0:43:f3:86:90:dc:d4:cd:18:dc:40:ce:6e:aa:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:57:1D:99:59:20:8A:57:8E:A6:B5:34:68:3E:8F:E4:74:2F:FD:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50fa619c-b5ae-3c2d-a793-cd67260c0cb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:ce:17:a3:c1:90:40:3c:8b:4e:7b:e6:84:4a:4f:f7:19:14:
15:36:99:0d:19:47:aa:39:83:25:d1:6b:20:46:00:e2:05:9b:
83:04:02:fd:06:ef:f0:73:11:37:ee:82:4a:7d:52:db:56:b2:
a6:ca:49:32:b3:76:d0:f1:2b:10:1c:22:5f:f3:99:2f:d4:cf:
a6:3b:de:9e:25:57:9b:0d:e4:2f:3f:0a:ad:08:7d:73:86:39:
37:44:54:e8:b7:6f:5a:fe:e9:43:ff:d6:8d:24:b5:d2:0b:c5:
6a:ce:23:03:f0:53:91:4f:3e:45:ed:01:fc:28:f5:bc:24:f4:
fb:55:11:21:df:0b:40:55:ac:27:6c:74:a7:90:d9:4b:a6:53:
25:e9:9e:e6:87:16:67:60:30:55:9b:45:80:19:35:5d:40:61:
1a:cd:03:b5:09:28:47:e9:54:b8:69:18:7e:7c:45:e8:17:ab:
a6:e1:55:00:64:ea:08:7f:ce:62:c1:32:5c:e1:fd:00:20:fa:
f0:9c:fb:fd:9a:f7:68:40:94:65:f5:d8:2d:7c:16:70:54:3f:
8d:89:bf:ad:c8:c9:b6:91:55:0d:1b:27:be:53:1b:d9:69:94:
81:b6:1c:44:c7:67:bf:c4:0b:bb:c7:c6:3a:9f:98:0e:63:5e:
c0:9e:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:46 2025 by rpki-client