Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/860972ad-e8fb-3e0a-af77-7a2542aa78df.roa
File: 860972ad-e8fb-3e0a-af77-7a2542aa78df.roa (raw, json)
Hash identifier: dXBE5qdb+NhblGzchcraa1tck+Z8tBhvRygRtDzE2Tw=
Subject key identifier: 2D:BA:DB:AF:09:D6:61:96:BE:ED:40:70:B7:CB:CE:19:CE:F3:AF:BC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B4E6E3480D8A9FE14377F8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/860972ad-e8fb-3e0a-af77-7a2542aa78df.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 50.100.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b4:e6:e3:48:0d:8a:9f:e1:43:77:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=03d6ce44-b5b1-4182-a062-6c991dca0fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:41:ab:06:13:da:dd:9a:97:31:0e:8e:52:
b6:fe:18:50:e0:82:df:f5:49:c1:cc:5d:54:46:48:
18:c9:d9:80:b6:bf:2d:77:95:45:30:ea:4c:7c:46:
b4:de:28:be:71:a0:f3:70:15:05:e8:4c:d5:1d:73:
61:bc:28:7d:77:3e:ae:67:ac:de:47:3d:94:4a:24:
84:ca:f4:50:2a:c4:44:95:49:84:0e:fc:de:a3:a1:
ab:3d:78:a9:bd:4d:33:24:4a:63:e6:5b:14:03:aa:
66:59:29:5c:78:46:34:d9:b8:95:e0:41:8e:6f:c0:
b2:6e:a9:93:12:59:8f:b1:5b:bf:04:a1:67:72:82:
79:9c:c8:b1:69:17:fb:4c:79:7b:5f:16:01:c8:12:
e8:66:ee:6e:e2:e0:25:b3:09:db:6c:56:be:f5:6b:
53:06:9c:49:41:1b:a2:75:af:22:33:b2:c3:46:76:
fe:1f:30:57:c0:24:9d:54:eb:46:c5:41:33:30:1d:
fe:0b:5e:c9:65:4d:b4:42:d8:76:a6:dd:91:35:02:
31:46:44:5b:5c:e6:f4:7e:7d:77:89:66:b4:30:77:
cc:05:47:9f:fa:bf:ad:b1:31:58:0b:67:80:d8:e4:
dc:2c:19:99:fd:4b:c1:51:63:52:33:68:68:d3:dd:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BA:DB:AF:09:D6:61:96:BE:ED:40:70:B7:CB:CE:19:CE:F3:AF:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/860972ad-e8fb-3e0a-af77-7a2542aa78df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
50.100.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:57:a7:75:75:f8:b9:94:29:c0:f8:df:24:e2:89:0a:cb:c4:
3f:d3:14:8f:45:a0:23:c2:18:a2:00:3a:85:e2:5f:2f:dc:7f:
82:13:00:ab:4d:43:f5:92:fa:1d:cb:be:63:b8:b8:7e:ad:b8:
71:4e:fa:7b:5a:77:7d:0c:1c:d8:1b:31:92:85:75:8a:ab:b1:
36:ad:32:02:8c:5f:fc:37:2d:33:35:0d:35:97:da:5e:ef:10:
81:40:a0:6a:29:1a:1b:0d:48:3a:ca:a2:c1:dc:f5:e1:b3:99:
18:ce:76:a7:91:e1:dc:d7:2d:e8:30:5f:7c:87:e5:f4:86:b3:
e4:a5:89:ad:71:17:c7:5d:52:9f:9d:89:02:cc:8d:a7:be:5c:
5b:9a:ee:63:77:b9:5f:36:c1:cc:2b:ed:e2:6a:5e:d5:2d:1d:
f0:0a:16:a6:f9:f9:20:bd:81:a4:e5:6b:39:a6:95:b3:20:20:
e4:01:bb:f8:c6:78:69:7f:2b:bb:bc:cb:94:08:d6:bf:b5:65:
f3:20:39:50:e6:49:83:12:09:6b:b7:ad:71:cf:ee:91:66:d2:
81:c6:66:3e:77:97:d1:d4:d2:81:d4:99:0a:27:74:65:94:4b:
8f:2b:9c:ba:d9:6a:f9:a4:0d:4a:5b:36:eb:c0:5b:63:4f:44:
d0:f9:eb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:24:58 2025 by rpki-client