Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c2591ce-3aef-3fa7-b4cf-0f423d68e680.roa
File: 7c2591ce-3aef-3fa7-b4cf-0f423d68e680.roa (raw, json)
Hash identifier: XthSeQsZiSvqfG3pQY1Bdzjq6f0ldr3CG5lSV56EhAE=
Subject key identifier: 65:16:0F:C9:A8:02:C0:B1:74:CA:D2:BF:E2:F8:28:76:80:53:9D:F8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213431B0420F49CAF6D0D700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c2591ce-3aef-3fa7-b4cf-0f423d68e680.roa
Signing time: Sun 09 Mar 2025 10:20:40 +0000
ROA not before: Sun 09 Mar 2025 10:20:40 +0000
ROA not after: Sat 07 Jun 2025 10:20:40 +0000
asID: 63131
IP address blocks: 142.120.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:31:b0:42:0f:49:ca:f6:d0:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:40 2025 GMT
Not After : Jun 7 10:20:40 2025 GMT
Subject: CN=3befa319-3c75-4d5c-8457-8b95e339c660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:1b:f4:d4:86:95:17:70:d8:23:f1:8a:89:
6b:e3:c8:33:25:40:5b:b5:40:d6:f2:54:9a:e9:dc:
d4:a7:41:f4:70:d4:34:2b:9f:92:15:f1:79:7a:b4:
31:9f:bf:20:57:dd:0e:05:1c:c9:b5:3e:3b:89:e3:
fb:1f:e9:c5:29:7d:ae:55:e4:bc:c6:b1:47:d6:99:
6c:ff:35:af:e4:28:71:00:ab:d4:1b:f3:f7:e8:ec:
c4:54:da:bc:19:ed:46:cf:7a:b3:c0:8c:e0:a7:8a:
1c:05:ce:a0:a9:38:c0:4f:2b:59:f1:20:13:93:3c:
d7:67:f4:3f:ee:80:e5:35:d1:8c:07:30:2d:92:7d:
cb:96:ac:23:ae:ac:9b:2b:c1:c0:df:27:15:64:2c:
b0:f5:20:db:15:d0:22:bd:5c:f2:be:65:96:fe:de:
0f:b6:cf:97:23:26:47:4c:19:54:54:39:dc:97:0b:
27:0a:c6:46:2a:cd:10:13:f6:57:7b:c9:b1:e3:cb:
78:78:1d:7a:97:11:7b:5c:11:2a:05:81:8f:af:68:
7d:a5:66:91:08:3a:7e:bb:42:e0:f3:65:89:b0:49:
b5:ea:a1:87:11:61:3c:ac:52:5c:fd:6e:f2:84:7d:
43:84:ee:e8:2d:43:b3:2f:26:80:31:b9:dd:fe:fd:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:0F:C9:A8:02:C0:B1:74:CA:D2:BF:E2:F8:28:76:80:53:9D:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c2591ce-3aef-3fa7-b4cf-0f423d68e680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.120.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:ff:2e:fa:fd:db:16:0e:a4:b8:f0:e4:1a:8d:7f:83:30:26:
58:22:aa:f9:e6:0f:94:ef:e3:e7:76:4f:ac:cd:75:5e:ee:77:
69:da:ea:30:96:28:8b:c7:cb:59:1d:13:f0:38:3e:b2:7d:5b:
81:f0:5a:b5:ff:c1:0b:e2:da:b8:bf:2c:ab:bf:f8:0f:6b:52:
05:b0:89:5f:8b:65:7c:c5:74:63:10:0d:c0:a8:d1:29:34:2e:
cd:ed:b7:ad:5b:c4:06:86:65:93:e5:b0:11:9e:eb:30:d1:c5:
7d:7c:25:1a:9c:d5:fb:ab:f8:da:30:ad:87:3c:a1:14:7e:30:
e7:d1:ed:f8:96:8e:6d:ac:41:62:46:68:5f:6d:ae:57:48:b5:
fa:aa:bb:70:67:1b:c8:60:56:fc:e5:b2:2b:f0:69:6c:48:8a:
d5:00:64:2a:6b:50:c8:7f:ff:5c:5e:41:17:17:eb:49:b4:8d:
1d:79:66:f2:a1:b6:ba:4c:0d:cd:5c:2b:51:ff:83:2e:04:40:
c1:ca:48:a3:a4:df:da:b3:51:fa:08:6e:1d:c7:9e:64:c4:17:
57:e8:b7:42:07:b3:79:86:fe:4a:72:fb:a8:92:d8:1c:13:5d:
98:22:a3:59:64:3e:41:57:0f:23:21:89:21:00:3b:c1:76:a9:
8d:90:59:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:45 2025 by rpki-client