Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa
File: 60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa (raw, json)
Hash identifier: k6o+i4nIeyAj5rXPKkcmtsJfShkTa44bTwv1MyOAD/0=
Subject key identifier: F5:09:42:BA:61:4F:77:4E:87:E0:12:23:64:CB:CD:E6:D8:85:37:C0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213441DB2F8A1C9818EE0800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa
Signing time: Sun 09 Mar 2025 10:20:48 +0000
ROA not before: Sun 09 Mar 2025 10:20:48 +0000
ROA not after: Sat 07 Jun 2025 10:20:48 +0000
asID: 36522
IP address blocks: 204.101.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:41:db:2f:8a:1c:98:18:ee:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:48 2025 GMT
Not After : Jun 7 10:20:48 2025 GMT
Subject: CN=1936a0d4-2d53-47a5-9198-ed018be3912c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:3c:01:8f:24:ea:0f:b0:31:86:48:00:1c:
70:7e:62:90:75:10:c8:b5:a6:19:cc:53:7d:7f:e4:
9d:a2:d0:d2:a8:ee:92:78:3c:25:dc:97:3a:fa:94:
08:84:23:7e:18:ea:1b:cc:68:6a:3e:91:9f:6e:06:
ef:5b:ab:52:2f:b8:6b:a3:f0:31:c2:21:5e:de:d6:
f9:25:a1:a6:a3:ec:64:b5:d8:4a:8d:6f:2e:cb:b5:
c9:32:31:fc:a5:a7:60:0b:7c:09:7d:de:66:ae:7f:
45:68:ef:e9:68:19:c4:ae:0d:e1:5d:b9:d5:25:74:
93:84:a3:13:08:75:ec:ff:92:07:9a:1c:c1:49:20:
b5:be:3d:2d:41:58:a5:84:98:6b:fb:8b:0b:20:e0:
84:01:19:14:1e:a9:f9:19:30:d1:6a:51:4d:21:ed:
4a:3a:e8:56:4a:4d:92:53:d3:d6:08:c3:60:08:36:
2c:fe:6d:79:86:7d:73:09:c3:d6:89:d6:4b:44:56:
1e:e8:fc:4b:07:f7:d4:59:e5:6a:b2:5f:6e:7c:cd:
c7:dd:19:60:f5:f6:65:ea:e9:4f:fe:11:8c:02:7e:
b0:7f:1d:a4:f2:54:f6:64:05:25:4c:43:2c:4b:5b:
0c:52:0d:87:d6:91:b7:a5:d3:f9:47:7d:22:57:7f:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:09:42:BA:61:4F:77:4E:87:E0:12:23:64:CB:CD:E6:D8:85:37:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:c7:ae:fe:b4:a6:16:6f:f2:ab:05:b2:1f:3b:05:a7:88:55:
08:6e:ba:a0:e0:36:e8:92:4f:bf:a8:c2:bc:5c:0b:ae:d4:bd:
39:69:af:7f:64:6e:f9:e3:b0:c4:f7:17:bd:e0:4a:de:e9:03:
4f:a8:44:1c:26:44:52:ef:21:94:30:36:c7:45:44:7f:53:55:
b0:0c:c4:ed:fb:5f:c5:c4:bf:3e:d9:3e:b1:26:b1:72:b5:7d:
e2:27:e9:7f:21:b7:ad:89:93:51:70:16:13:5b:9d:52:3a:8b:
21:0e:94:c5:f4:41:eb:4a:da:13:5a:2a:ea:3a:f7:90:5e:18:
2d:96:bc:ef:78:7f:f1:63:11:a5:16:44:ad:34:f9:b9:c2:70:
c9:5f:38:20:ec:21:b0:3c:1d:a5:d2:0e:c4:d6:18:70:c2:1e:
80:25:63:69:db:b5:45:4b:76:6b:45:4e:ed:0e:0d:fd:c1:e3:
b7:02:4a:9a:64:4d:f7:87:f5:ec:33:a4:8a:30:c6:5f:ca:d0:
1a:f7:20:a0:9b:6e:ab:a1:9c:da:86:43:c8:97:f2:d8:0e:15:
94:f8:6d:c0:2e:49:06:38:98:1a:f9:7d:08:b8:58:6f:ef:9b:
c0:cf:75:2e:20:93:d0:1b:e8:4f:6c:13:45:3e:8a:40:aa:a0:
52:97:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:45 2025 by rpki-client