Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/872fbb83-6cb0-31ec-9b42-727e3654b4d6.roa
File: 872fbb83-6cb0-31ec-9b42-727e3654b4d6.roa (raw, json)
Hash identifier: Z2lv2NvJ8zB47y8wcAMjdx0JkXW95bTtGf3Y4vUr394=
Subject key identifier: C0:E9:F8:1A:68:C4:56:CD:6B:B6:0C:E6:DB:B5:0A:C9:38:70:A8:BC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134360672E94B60F6D61D60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/872fbb83-6cb0-31ec-9b42-727e3654b4d6.roa
Signing time: Sun 09 Mar 2025 10:20:42 +0000
ROA not before: Sun 09 Mar 2025 10:20:42 +0000
ROA not after: Sat 07 Jun 2025 10:20:42 +0000
asID: 577
IP address blocks: 174.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:36:06:72:e9:4b:60:f6:d6:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:42 2025 GMT
Not After : Jun 7 10:20:42 2025 GMT
Subject: CN=37a133ec-e2f5-4267-9f0a-3037377877fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:dc:c6:93:a2:91:5c:f7:58:8a:5d:a1:32:
05:a4:28:7c:af:9a:03:52:33:32:47:42:3c:18:f8:
33:a5:04:18:ab:56:02:e1:36:4f:19:d7:49:bd:c3:
d5:53:03:1a:e0:1a:e6:37:36:4a:75:36:fd:72:4c:
02:f5:e7:46:8c:7e:84:9e:f2:1d:48:65:ac:37:3a:
d8:64:20:28:a4:df:77:57:2e:ae:8e:4c:86:1d:aa:
5c:5c:6d:26:a0:8a:be:ea:69:06:30:cd:f9:db:0a:
eb:19:f7:56:62:a4:18:d1:47:ca:c2:d6:a8:fa:84:
eb:0f:31:aa:6d:49:2a:aa:3c:ed:3d:2c:58:5e:53:
92:55:74:54:3a:74:9f:c9:34:94:3f:c0:47:9f:19:
c4:17:1a:d0:37:cb:7e:44:0c:9b:5d:52:94:93:6e:
f0:65:47:31:ee:4f:3e:fb:2d:96:54:35:ca:1f:ac:
58:ad:c2:22:db:fd:bf:50:ed:95:84:e5:04:e2:08:
0c:48:bd:78:36:b6:ab:f3:a2:47:11:a3:a9:1f:82:
43:cf:ad:03:93:7f:59:83:7f:c8:a4:bd:a8:09:35:
83:1d:82:d2:a2:19:14:74:86:a5:ea:3a:40:ab:18:
bd:d3:2a:35:c3:00:dc:5c:71:83:be:2b:cf:f6:7e:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E9:F8:1A:68:C4:56:CD:6B:B6:0C:E6:DB:B5:0A:C9:38:70:A8:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/872fbb83-6cb0-31ec-9b42-727e3654b4d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:bc:4c:de:45:66:22:4d:e5:38:93:42:c5:30:9e:ac:8b:90:
31:4c:21:18:e4:2e:96:a8:4d:81:a7:62:a2:d0:d1:57:c1:b4:
47:41:2b:ba:86:c1:75:69:99:98:91:8e:5f:fb:e5:ac:c7:a7:
4c:1c:48:e6:6d:82:91:07:ee:02:7f:51:65:01:54:e0:44:ce:
f6:d6:da:16:ff:4a:44:f2:34:21:e2:ea:07:0c:21:35:33:c0:
1c:c5:d4:8c:1a:2f:b7:c5:29:ac:1c:85:75:7b:95:b8:bf:79:
a2:5b:e1:5b:6a:b5:9e:0f:a3:4a:e9:6a:31:39:c8:e4:56:58:
3c:95:47:79:25:06:ad:83:7f:02:80:77:69:28:8c:30:42:ef:
2e:33:55:47:e1:04:47:28:0a:68:a4:b4:ec:26:3d:62:e1:bb:
42:f9:e1:63:eb:cb:a0:5b:52:87:3e:0c:34:fd:a9:dc:59:48:
0a:2e:65:fb:24:f2:41:5b:83:1d:39:0b:fa:e2:3f:eb:34:2d:
ae:18:37:48:51:5a:e5:6c:40:89:0c:4d:98:97:cb:01:be:38:
65:30:90:f5:90:fe:a8:c9:eb:c0:d3:ee:86:78:e0:4e:64:b0:
e2:13:44:e0:fb:ed:a2:a0:d6:95:ab:61:8a:30:59:46:31:b9:
c9:40:41:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:35 2025 by rpki-client