Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/518f742c-3690-35e0-9bf7-3899759f6759.roa
File: 518f742c-3690-35e0-9bf7-3899759f6759.roa (raw, json)
Hash identifier: tHjA7PXvKit33hTotsngCh45PeRjorQ13Lm71pFkrFM=
Subject key identifier: E4:7E:FD:04:20:23:D6:4A:79:DE:F4:49:0A:1B:97:03:4E:19:8E:DF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921342BE36CB17F39F73F5F40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/518f742c-3690-35e0-9bf7-3899759f6759.roa
Signing time: Sun 09 Mar 2025 10:20:37 +0000
ROA not before: Sun 09 Mar 2025 10:20:37 +0000
ROA not after: Sat 07 Jun 2025 10:20:37 +0000
asID: 577
IP address blocks: 70.28.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:2b:e3:6c:b1:7f:39:f7:3f:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:37 2025 GMT
Not After : Jun 7 10:20:37 2025 GMT
Subject: CN=5e032f96-c919-480c-96d2-8df0b7646af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:37:04:63:a9:51:68:43:6f:b2:93:63:24:
08:7c:1c:9c:22:20:84:b1:41:60:3d:13:9d:cb:39:
33:85:98:33:97:2b:81:c6:1b:37:cb:8b:48:90:35:
e4:7a:c1:18:65:79:36:c9:03:2b:0c:c9:65:6d:96:
27:7d:be:59:bc:13:94:0a:39:ed:a4:45:38:3a:13:
4e:95:9d:de:31:43:fb:37:e1:dd:48:8f:db:1e:e7:
1b:f7:b5:5b:8e:68:cc:ea:25:25:19:96:da:e0:81:
01:82:4b:4b:a0:41:68:32:d5:53:6a:b8:2b:67:87:
2f:1c:7b:2a:73:85:64:1e:0e:eb:1c:2d:00:4f:f7:
fc:21:c2:f8:8f:52:bc:25:91:ba:ee:53:1e:96:04:
71:63:9b:24:9d:6c:85:31:9b:ef:0c:d3:96:3e:43:
8c:62:a6:e1:88:b9:74:d0:c5:f8:8c:3e:51:0e:f7:
e1:94:0f:a7:b9:c8:28:41:4b:ae:5b:62:1e:a0:37:
73:26:59:ef:5d:c9:73:cf:d4:7f:76:ce:47:ca:4f:
40:a8:c0:47:5d:fb:60:8c:b9:80:5d:c8:bf:ca:bc:
4a:4c:82:f1:87:28:fa:04:46:8d:2c:57:be:04:1a:
fa:7f:41:73:4b:0e:cb:29:ea:7c:7b:37:f4:32:2c:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7E:FD:04:20:23:D6:4A:79:DE:F4:49:0A:1B:97:03:4E:19:8E:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/518f742c-3690-35e0-9bf7-3899759f6759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:ce:38:20:bc:22:62:97:cc:36:1f:b9:8c:b5:bc:47:d3:cb:
91:b2:b9:1d:62:d0:bc:e5:76:a9:e0:49:a3:50:4e:1f:65:16:
db:e5:6c:b8:4f:24:46:a6:30:b2:8a:99:4c:d2:cb:8b:b3:0a:
e0:4d:3f:35:67:e7:1e:57:42:98:06:a1:57:a6:c4:3e:0e:ee:
e1:de:17:9e:d0:6b:d9:68:c8:d2:1d:f4:70:a3:47:30:21:78:
20:4d:a1:67:25:7a:2e:ae:54:8f:f8:38:9e:34:3f:d4:48:de:
6a:24:46:b4:98:ed:58:71:7c:b8:04:ab:39:14:d1:ad:b5:95:
a4:73:f3:18:cd:98:b7:37:3d:d9:2c:84:8f:33:0c:76:a1:1b:
fc:d2:6f:e4:d0:77:0b:bc:ad:35:55:fb:7f:43:43:8e:ff:19:
80:94:86:17:11:19:06:6d:f0:23:28:31:fa:40:7c:f2:16:bc:
a0:91:a8:81:ee:25:08:a3:e9:cb:b1:b9:9a:b3:c8:10:52:c6:
79:a6:50:a8:44:5a:66:51:82:95:f5:16:8b:57:4a:48:26:8b:
ab:32:fa:bc:4f:9c:3c:16:df:86:82:54:29:54:12:a4:e4:c4:
ca:29:0f:47:d5:4b:49:e5:b3:c6:72:2a:dd:53:c0:41:c3:c5:
70:c3:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:41 2025 by rpki-client