Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5dc600c2-06d1-3ee9-a41a-a03b1303d31f.roa
File: 5dc600c2-06d1-3ee9-a41a-a03b1303d31f.roa (raw, json)
Hash identifier: OLpjh1sVK4pQ2f44nSX/WynCXlxK2NrwBgxkJdO7rfM=
Subject key identifier: 7A:1A:7D:C8:00:0C:17:3F:18:AC:6D:CA:0A:3D:64:FF:C8:F8:3E:FC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B64410813DDFCA35558EA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5dc600c2-06d1-3ee9-a41a-a03b1303d31f.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 397168
IP address blocks: 204.101.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:44:10:81:3d:df:ca:35:55:8e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=f41a068f-8de9-4588-bcd8-bfbcd9c927ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:a0:dc:c6:d6:ec:be:6d:79:be:41:4c:f0:
b6:8c:0d:8c:b8:85:88:a8:0d:3c:28:d4:4a:7a:fa:
85:ba:44:83:85:11:bf:42:10:e2:99:9b:7e:64:fc:
e9:87:3c:7c:10:ea:b7:66:e2:a1:e7:66:91:37:d4:
94:f0:25:a4:8e:a1:88:76:96:b5:28:bc:49:bd:07:
a0:6e:fa:35:02:68:83:ee:f8:f7:30:2f:11:b4:59:
f9:d2:fe:d8:68:1c:a3:f2:66:a8:0e:70:71:2b:21:
7c:51:7b:01:43:fa:6a:9a:f8:d4:52:b2:b0:8e:12:
8c:4c:ed:61:3f:0b:7c:00:ee:db:47:a4:a7:36:5c:
9a:48:15:8a:30:2a:d8:76:2b:9b:31:72:44:8e:33:
a4:59:56:d0:1f:c2:2e:cc:3d:45:5a:89:f7:1f:ff:
f2:c5:02:9d:87:5a:00:a6:bf:cf:ae:17:64:c9:15:
d9:53:00:28:59:5a:bf:94:9b:3b:e4:ae:6d:4b:34:
b0:19:24:ac:42:93:c8:62:ee:d5:e8:96:8f:5b:04:
b8:74:f5:12:0e:a0:e6:da:ce:1b:4b:ba:73:c0:c7:
33:d4:d1:ee:d2:46:91:db:b5:11:bc:2a:b3:59:cb:
ca:f5:d8:d7:bb:ba:69:ed:10:d9:e2:c1:fa:75:f9:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1A:7D:C8:00:0C:17:3F:18:AC:6D:CA:0A:3D:64:FF:C8:F8:3E:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5dc600c2-06d1-3ee9-a41a-a03b1303d31f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:a0:6a:58:c2:3f:95:be:98:37:2d:0f:d2:83:36:b3:b4:2c:
c8:f9:d0:3b:7a:c6:b2:0a:9c:33:5b:8a:77:a9:dd:30:f9:a6:
a9:dc:36:c2:b6:88:2b:94:2d:0c:12:b7:2b:30:a0:27:61:22:
3a:dd:f3:a5:75:8b:16:d0:9e:52:6d:8e:63:d4:fa:55:23:8a:
5a:44:a0:7f:6f:72:45:7a:af:ca:19:f7:e9:ab:f0:2b:a7:af:
dc:82:c7:1d:4e:62:28:1e:b0:1e:01:fd:59:25:3c:8a:93:55:
da:c1:39:41:65:93:3c:14:64:45:b0:00:47:96:f4:b7:4b:33:
4f:94:e8:ae:94:7e:9d:4f:c7:03:f4:e3:81:9c:74:b9:f6:2a:
f2:02:07:00:f4:f6:dd:55:b9:c1:bd:bf:1a:82:1f:51:48:9e:
cc:5c:d7:be:a0:5f:27:75:68:31:d1:5e:07:d3:e7:72:06:d6:
2c:df:ca:ec:0b:44:36:34:39:12:92:97:aa:9c:43:ad:f4:da:
12:64:1f:81:63:27:ee:ee:ce:d4:6e:53:46:99:a3:cc:36:5b:
a0:f2:75:94:06:9c:99:64:d8:23:55:d8:a6:42:45:d0:4b:e2:
e8:da:cd:34:26:30:3c:6c:5a:61:59:18:85:d8:a2:ca:2d:7f:
58:d3:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:25 2025 by rpki-client