Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/63099fd2-1266-3250-9ac7-7b00832af67e.roa
File: 63099fd2-1266-3250-9ac7-7b00832af67e.roa (raw, json)
Hash identifier: ovMJkkRfN6LJZnGmrOky8dSBiQvZRUortAGiLyRmt18=
Subject key identifier: B6:D4:47:73:42:C1:75:AF:10:52:5A:20:D2:48:B5:95:54:D7:35:C0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921346E0284C026603473DC60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/63099fd2-1266-3250-9ac7-7b00832af67e.roa
Signing time: Sun 09 Mar 2025 10:21:08 +0000
ROA not before: Sun 09 Mar 2025 10:21:08 +0000
ROA not after: Sat 07 Jun 2025 10:21:08 +0000
asID: 36522
IP address blocks: 216.208.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:6e:02:84:c0:26:60:34:73:dc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:08 2025 GMT
Not After : Jun 7 10:21:08 2025 GMT
Subject: CN=fcb49096-7a78-4361-8f35-123e51d5bfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:86:46:78:3b:03:63:5e:d5:c2:20:d1:b9:
b5:63:6a:cf:be:ac:09:3f:e5:78:82:51:75:7d:37:
d4:8f:f1:ac:be:1f:5c:25:e1:16:ac:0c:ea:59:97:
a4:2f:5c:45:2a:95:18:be:71:29:74:ff:72:c6:78:
94:88:ae:87:eb:a8:6f:a9:3c:ba:81:33:76:21:b9:
bc:99:67:f7:18:79:43:94:14:c0:52:4a:19:33:83:
10:05:84:59:6f:13:f3:70:cd:f7:db:6a:46:8c:7b:
fd:2e:3e:c4:15:89:5e:c7:1b:c2:b7:97:57:c5:2b:
22:03:7b:1a:f2:34:d3:b4:40:c9:81:2d:03:69:c2:
ee:49:07:b1:42:ec:bd:f3:51:72:e8:1b:f6:a2:e1:
57:89:fc:e0:00:62:35:23:b0:02:2d:e6:a3:a9:c7:
4d:43:2f:53:2d:7d:51:b0:9c:03:d8:e6:ca:b4:89:
75:b5:51:d2:58:27:a6:8a:7a:19:c7:e3:20:4e:5e:
4d:ee:37:de:5b:31:6c:1b:da:c0:4f:5a:22:52:04:
c9:76:55:3d:60:90:86:80:06:d1:fa:fc:8b:a5:46:
3d:e0:e0:53:27:84:30:d0:3b:98:e6:be:d7:37:eb:
90:7d:23:bb:69:af:40:60:e2:0f:13:28:67:30:ae:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D4:47:73:42:C1:75:AF:10:52:5A:20:D2:48:B5:95:54:D7:35:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/63099fd2-1266-3250-9ac7-7b00832af67e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:16:eb:b0:5c:3c:f5:55:28:7b:70:2b:62:c7:89:25:83:6f:
2e:35:16:95:49:15:68:0b:8a:dd:4e:18:9e:6a:30:ef:0d:7f:
43:f8:a8:4f:17:71:e7:44:ba:be:31:71:9a:32:51:9c:b6:22:
6a:c2:1e:db:54:8c:3a:c4:6a:30:a1:86:48:f2:90:2e:a3:47:
83:c8:b4:79:9f:f0:88:c5:41:07:ea:65:d9:1e:17:18:c7:d0:
24:87:e6:8d:4c:5a:d6:68:22:78:5c:4a:d0:00:c7:72:f2:ad:
e4:5d:ac:76:d6:ed:42:a4:41:bb:48:08:97:b0:de:55:12:81:
9f:2b:58:3a:14:8e:75:7c:fb:9c:1c:b9:9e:20:f0:0c:2a:26:
81:11:89:47:eb:27:3a:22:b3:90:20:5d:bb:37:ba:02:b0:a1:
ea:0f:f9:11:04:94:bf:82:14:60:06:c9:9d:25:f2:c5:ad:56:
84:cc:ea:d8:90:07:f9:18:23:9a:63:46:8e:37:2a:f0:10:6c:
99:96:8f:62:c8:7c:bc:57:3b:5f:f0:9b:9d:68:54:73:fc:fd:
e2:34:4d:fc:f7:70:60:26:a5:8c:60:87:0b:1c:38:35:35:96:
cb:69:ff:1e:e6:08:08:db:1b:ca:a5:08:41:7a:cb:c8:78:b8:
88:77:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:15:33 2025 by rpki-client