Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7927f230-4eda-3069-9826-75cf6971a65e.roa
File: 7927f230-4eda-3069-9826-75cf6971a65e.roa (raw, json)
Hash identifier: HFtoOwCDwDzwdw1kJk7o9nSTw13mhnwNvHBKkvTOLcQ=
Subject key identifier: 6E:62:52:D9:E9:5A:81:5D:F8:FF:4E:6D:5E:FF:D0:BB:7B:55:8E:92
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921342C6611F0E21255246D40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7927f230-4eda-3069-9826-75cf6971a65e.roa
Signing time: Sun 09 Mar 2025 10:20:37 +0000
ROA not before: Sun 09 Mar 2025 10:20:37 +0000
ROA not after: Sat 07 Jun 2025 10:20:37 +0000
asID: 36522
IP address blocks: 70.28.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:2c:66:11:f0:e2:12:55:24:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:37 2025 GMT
Not After : Jun 7 10:20:37 2025 GMT
Subject: CN=0dcd38e8-5fce-4e42-9c06-5efd2f603ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:29:61:27:03:ca:1a:d7:a8:12:99:35:5f:
fb:04:79:8a:9e:27:eb:71:7e:cb:55:74:c2:76:b1:
3d:30:b4:02:19:92:a0:a8:e7:d1:93:75:90:ec:ab:
40:58:bb:40:a8:27:65:a8:17:06:ec:ba:58:f4:24:
cf:d0:5d:07:43:76:c8:56:ce:f2:1f:5f:5e:0c:23:
14:20:95:55:f8:75:d7:01:46:c8:5d:85:c5:e5:11:
d2:4c:19:c6:c8:a1:09:02:33:32:5b:50:b3:42:17:
db:91:b7:1b:55:92:55:6f:a2:66:cb:0d:7b:b2:3a:
c9:89:2c:02:a7:7c:e2:fe:52:32:07:72:65:2a:6e:
d5:71:ba:70:e3:c5:33:47:f4:ca:73:92:40:34:f4:
16:07:e8:d9:43:6c:cc:54:28:cc:e9:b4:1c:09:68:
05:8e:d2:14:34:64:8a:71:0a:00:2d:71:49:49:35:
01:a1:d8:cf:ab:ac:b3:62:8f:7c:7d:14:a9:2b:8f:
38:05:e1:a7:e8:bd:6a:b0:b3:37:5c:90:0e:5a:94:
55:86:bf:6d:04:e0:8d:1f:54:e3:95:a8:65:7a:88:
dc:57:70:a1:ab:3e:88:23:8f:6e:f1:1c:27:8e:f4:
e5:d4:3e:16:3a:d8:5e:0f:94:28:9b:bf:ee:ef:98:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:52:D9:E9:5A:81:5D:F8:FF:4E:6D:5E:FF:D0:BB:7B:55:8E:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7927f230-4eda-3069-9826-75cf6971a65e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f8:4c:e6:99:f9:a1:f1:ec:be:80:fd:56:42:c3:68:87:c7:
93:c4:cb:cd:93:cd:05:b5:0e:6a:23:77:99:1a:3a:e8:2d:85:
71:77:12:86:4a:4a:13:d3:2a:35:2e:68:09:2e:87:a0:34:26:
b8:c1:c4:fd:d0:96:07:bc:2e:cd:a5:5e:9f:f6:eb:41:73:66:
eb:d2:fb:c3:a6:77:90:02:1c:83:45:8c:1d:b6:ed:b1:93:20:
1a:00:d4:46:9b:71:c1:82:7e:53:eb:d0:8e:11:8a:67:f6:e3:
b6:40:91:b4:bf:94:a4:b7:7d:e5:18:d2:09:c4:67:cb:b2:b3:
7b:f5:41:d0:3c:da:9f:96:e9:af:4a:2d:ec:f6:de:6a:ae:bc:
94:68:bc:2a:4e:12:03:96:2f:29:2c:9f:b9:91:56:6b:b7:e2:
cf:cf:cf:cd:61:38:ed:1e:32:d6:15:7f:b8:21:1e:3f:79:a5:
3e:cc:08:3f:f8:f9:d5:40:8e:fe:66:f8:06:6a:a1:94:03:fb:
6f:da:36:2a:e2:ca:3c:bd:4e:5f:c3:81:bb:f6:6d:87:ff:49:
ee:c2:f2:05:bd:ca:b0:06:9d:5a:c2:2b:b6:6c:91:8e:9c:a0:
4b:1c:d8:36:99:9f:20:74:af:82:91:2d:04:83:f5:61:1c:35:
2d:52:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:42 2025 by rpki-client