Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65be1079-448c-30a2-8892-ac08fc954a7f.roa
File: 65be1079-448c-30a2-8892-ac08fc954a7f.roa (raw, json)
Hash identifier: KNKSWr/Nw6yZ4XlbL85kLni7CxAmY+7WYg6E8kHDN/w=
Subject key identifier: 97:FE:47:85:41:7D:24:9D:69:7E:BC:FE:59:79:6C:B7:5A:AA:AA:7B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213458221BA391A8BBC64080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65be1079-448c-30a2-8892-ac08fc954a7f.roa
Signing time: Sun 09 Mar 2025 10:20:58 +0000
ROA not before: Sun 09 Mar 2025 10:20:58 +0000
ROA not after: Sat 07 Jun 2025 10:20:58 +0000
asID: 36522
IP address blocks: 207.164.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:58:22:1b:a3:91:a8:bb:c6:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:58 2025 GMT
Not After : Jun 7 10:20:58 2025 GMT
Subject: CN=58a07a23-21f6-4401-8c08-6a1e0ad73be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:e2:00:ec:35:10:29:9b:d5:20:a2:ba:c4:
e5:39:a2:0a:7d:ea:5a:d8:e3:b0:a7:b8:5e:13:4a:
97:1f:46:85:da:a1:37:fa:2e:1a:11:87:78:51:a4:
82:66:3e:0b:88:75:24:db:86:ba:62:9c:1b:d6:47:
17:15:ac:96:c1:45:88:e9:7a:bb:7f:65:5c:61:94:
bb:dc:c5:7e:9b:51:63:ca:71:fd:81:e0:c1:e6:5c:
fa:e8:23:a6:09:cd:29:48:34:1b:7c:81:4d:5b:81:
d7:9a:57:ce:83:62:c0:ac:df:50:77:84:e1:77:13:
08:c1:76:8c:4e:a3:d9:c1:6e:0a:1c:26:e1:7f:cc:
67:06:1f:02:90:7f:b8:f4:6d:c7:91:1c:15:e0:e8:
41:fd:43:b4:f7:63:1a:2f:8a:99:e4:1a:c2:c7:cb:
ba:53:20:25:da:28:6f:4f:44:07:10:78:a6:0d:21:
29:a1:66:2e:86:d9:da:03:d8:90:66:e5:7b:e4:ab:
68:03:c8:36:7e:6a:d9:95:7b:41:36:91:da:1f:d0:
c7:ac:97:bf:b6:4b:8d:cf:cc:92:f9:74:ef:64:19:
77:c6:38:f5:89:a1:b9:94:34:b3:5b:ed:3e:bd:ec:
47:06:f5:0a:a3:3c:5b:bb:ca:4b:50:87:87:71:d1:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FE:47:85:41:7D:24:9D:69:7E:BC:FE:59:79:6C:B7:5A:AA:AA:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65be1079-448c-30a2-8892-ac08fc954a7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:ea:a2:8e:57:6d:5d:6a:89:91:59:5e:26:29:e7:a0:9c:61:
c3:29:71:db:3f:63:c4:9b:2c:9e:86:51:ca:9e:89:e7:47:38:
66:0f:3d:73:0e:31:c9:4d:06:b8:10:26:05:97:69:58:f3:a3:
57:dc:58:bf:a9:1b:0e:63:1c:ac:58:7b:ae:ff:dc:a4:b6:38:
b4:f1:71:e6:cd:d7:27:13:12:2d:c3:50:10:26:ce:b0:92:cd:
3a:6a:33:c2:18:a4:c3:33:a4:f6:55:19:ed:f1:99:31:cf:86:
a5:bf:35:89:0e:57:31:92:dc:c4:7f:da:87:d5:60:bf:1d:34:
2d:41:26:06:d5:fc:3c:e1:e0:b2:9a:96:67:fb:e9:07:b6:b7:
2a:40:59:b2:2d:a4:d2:f3:d8:98:e7:d2:2e:67:ec:f2:e5:5e:
95:72:8a:eb:60:f6:70:4b:63:f9:39:aa:9f:53:dc:7e:fa:86:
9c:7e:f8:4b:ed:0d:de:3e:f3:38:73:f8:17:1e:6b:6e:75:82:
8a:91:16:da:c6:a1:36:30:92:50:6f:65:a2:1a:a9:61:c0:98:
cd:ec:13:02:bb:29:fc:5f:93:75:9c:6a:89:27:5e:40:96:f2:
94:b9:f2:1c:bc:57:dd:7b:59:1c:2a:a8:26:70:e9:f3:3b:83:
d9:d9:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:35 2025 by rpki-client