Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa
File: 67477eed-64e1-395b-a913-8b8a438ebac1.roa (raw, json)
Hash identifier: tVJIDDMgO21w92tOVvJg2+k5dpK4chGmWOuH3X14O90=
Subject key identifier: 34:28:8B:09:A7:C2:23:52:91:3D:EF:FC:6D:0D:BD:82:DF:25:C0:97
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134608F1CF897026D4A51C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa
Signing time: Sun 09 Mar 2025 10:21:02 +0000
ROA not before: Sun 09 Mar 2025 10:21:02 +0000
ROA not after: Sat 07 Jun 2025 10:21:02 +0000
asID: 36522
IP address blocks: 209.71.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:60:8f:1c:f8:97:02:6d:4a:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:02 2025 GMT
Not After : Jun 7 10:21:02 2025 GMT
Subject: CN=f677e6dc-66cc-4fcb-94c8-58e203b06262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:25:0b:cd:ef:bf:61:84:21:b0:fc:47:f7:
e9:4c:03:11:84:cd:69:36:16:d2:b6:a5:71:c3:b3:
9e:c0:cc:24:92:72:3d:f9:10:62:52:d8:e8:52:22:
97:6d:0d:2f:44:8c:1c:54:95:6c:0e:1f:b3:42:af:
27:e1:d8:bb:a2:d2:a7:e1:f3:7e:b7:5b:58:3b:5b:
10:e8:29:f1:7c:e8:a4:ab:ed:ba:a7:29:0a:39:b0:
16:6e:d3:3e:52:04:22:2b:25:6a:01:68:43:e4:10:
45:0a:b5:d8:a4:e8:c8:4b:95:51:d5:66:74:27:39:
91:a7:9a:7f:0e:4b:16:eb:6f:e9:85:64:ff:3e:f9:
69:26:56:a3:5d:46:69:14:0e:86:61:8d:44:f5:0b:
c3:42:b8:b1:ab:71:31:89:03:43:44:7a:48:c8:5d:
4e:79:eb:12:d7:d6:9b:38:10:30:7e:ce:75:78:f3:
2c:5a:be:86:01:3a:6a:5e:09:99:73:28:43:0c:c3:
44:e7:1f:20:e6:51:6c:3c:a9:47:af:c3:6b:1c:17:
c6:ba:c1:5a:17:1a:b4:ce:d3:d8:0c:7a:41:ea:07:
36:68:0e:5a:de:0e:7b:b7:b1:d5:2a:ba:5c:6f:49:
b2:54:b9:d1:1a:df:a7:48:8d:8c:fc:07:88:ab:10:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:28:8B:09:A7:C2:23:52:91:3D:EF:FC:6D:0D:BD:82:DF:25:C0:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:87:38:dd:29:0f:f0:f3:2f:f4:dc:ca:2c:5d:a8:8d:fc:35:
b2:05:92:65:75:3f:a7:6f:a0:e0:9d:b8:3b:de:c7:2e:99:28:
6b:22:28:18:6e:ac:f3:f5:09:58:92:46:1d:dc:f5:0a:76:e5:
a6:29:0a:b2:ce:fa:1f:84:7a:e4:c9:83:6a:14:e3:26:de:a7:
a1:65:33:15:5c:32:a9:2e:73:dd:fa:4c:6c:8e:14:a7:e7:66:
7a:55:a1:ee:e2:2d:db:bf:7b:20:1d:9d:18:24:38:52:ca:e2:
06:89:fd:e2:d3:d6:a1:e6:fb:c0:98:3b:30:4c:90:14:cf:84:
3a:a8:bd:d1:8e:43:91:ec:ab:3b:f6:2e:b6:2c:9d:8c:c5:96:
5b:35:f8:fb:4d:6f:66:85:a2:25:d0:8b:d7:87:83:f2:9f:33:
ec:ff:8a:cf:64:b4:ed:ab:30:6f:e7:d4:81:d6:a2:c2:71:b2:
91:5d:b8:12:9d:09:7a:31:4a:84:d3:61:07:70:5f:c2:02:6f:
9d:08:bb:7d:c1:ab:86:05:a8:a2:68:9c:a5:f4:ed:d8:e7:35:
42:eb:92:a7:76:19:bd:d1:b1:e1:3e:bd:00:96:0b:cd:53:1b:
8b:52:54:40:57:50:ba:fb:e8:f8:e9:37:c6:9f:e5:51:5d:44:
c4:33:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:13:55 2025 by rpki-client