Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/894f1c41-1b5a-34b8-b687-921a5c8a47f9.roa
File: 894f1c41-1b5a-34b8-b687-921a5c8a47f9.roa (raw, json)
Hash identifier: ryiRj9j57kk7p8AmRnZZ9Dc1Tjn+kXtc4zOZgMbt56o=
Subject key identifier: 58:2C:C8:F4:F7:CD:87:18:A5:57:DB:3C:42:56:8C:87:28:F2:23:32
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921342B074F8A27DF087BCDD8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/894f1c41-1b5a-34b8-b687-921a5c8a47f9.roa
Signing time: Sun 09 Mar 2025 10:20:37 +0000
ROA not before: Sun 09 Mar 2025 10:20:37 +0000
ROA not after: Sat 07 Jun 2025 10:20:37 +0000
asID: 577
IP address blocks: 69.159.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:2b:07:4f:8a:27:df:08:7b:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:37 2025 GMT
Not After : Jun 7 10:20:37 2025 GMT
Subject: CN=f022671d-6912-48cc-8fc4-ec432f6f4d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:5b:49:47:c3:ba:5a:fb:3e:a1:7a:47:1a:
e2:c3:ea:0b:b5:45:ca:d9:e9:20:10:f4:ef:8d:c7:
a8:7e:a6:ff:24:59:02:8b:88:d8:ea:c1:89:3c:fe:
4f:b5:8f:98:64:16:06:56:cf:34:b1:5a:2d:48:c5:
ea:38:be:77:7c:3e:2b:63:b9:2d:92:f1:31:47:e3:
e3:72:ef:c0:4b:61:7a:43:9d:a6:7f:5e:9f:04:92:
e0:18:83:2d:c2:94:e1:e7:40:c9:50:52:57:77:04:
d5:42:5f:39:f1:2a:05:ed:df:e6:31:88:5e:69:d6:
6f:75:92:b7:12:9f:f3:b2:d3:3d:7e:79:40:8b:90:
09:5a:36:f5:2b:f5:42:04:31:57:bd:a1:81:62:23:
fe:65:7c:19:a8:d4:3e:f1:5a:d8:fb:73:be:b6:e4:
0f:5b:45:fc:f1:a9:9e:9b:10:bb:c8:04:2a:18:d6:
5e:0a:18:83:e9:a9:da:fb:f9:69:22:a1:af:34:04:
a2:8e:12:2f:0b:5c:db:36:04:b1:d4:6d:84:4a:58:
0e:e8:7c:67:e9:21:09:0f:b4:b6:46:1d:39:82:e1:
2b:b5:d9:fd:6d:1c:ef:72:30:c2:3e:64:a2:1c:42:
9a:45:7f:4f:f9:ac:0b:84:b9:45:9f:d9:57:63:a9:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2C:C8:F4:F7:CD:87:18:A5:57:DB:3C:42:56:8C:87:28:F2:23:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/894f1c41-1b5a-34b8-b687-921a5c8a47f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
69.159.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:81:80:5e:4c:70:ce:a7:73:b5:13:52:f6:f4:1a:a6:ac:e3:
27:7e:85:a6:e9:93:44:64:10:4e:9b:8e:11:57:23:7e:aa:63:
66:93:4f:05:19:cf:03:90:78:82:bd:c8:a9:0c:53:58:b9:d9:
d2:4c:a3:bc:0a:d2:80:0e:56:52:3a:c6:a6:e0:1b:dc:64:d1:
f3:82:6f:6d:25:bb:66:19:d7:0b:94:86:75:16:a1:c0:46:a8:
91:81:43:ce:e0:bc:ce:82:da:53:de:4d:6a:1b:61:c8:26:80:
f5:2b:a6:33:8e:c8:38:7b:43:ca:64:4b:0c:44:04:c3:e3:8c:
ca:23:80:1f:07:c5:cc:f2:47:9a:43:79:71:61:13:6c:dc:3c:
f0:ee:68:34:6f:33:ed:5a:4f:e8:95:8d:01:19:69:ea:d1:ef:
59:55:38:31:9d:a2:6b:92:1c:0f:b2:f8:74:ab:b4:4e:e6:5a:
11:d0:09:ca:0b:b2:56:b8:ee:7f:06:7c:cb:97:8b:1f:b2:52:
0a:5a:2c:96:7e:b4:0d:ee:a1:61:3b:5b:8e:a0:47:be:c8:26:
f0:42:7e:6a:60:31:c8:86:6d:60:6d:98:46:7e:76:f9:27:8c:
4e:45:d2:38:b9:2b:b6:de:84:ca:3e:44:41:64:81:94:f9:6d:
07:d9:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:46 2025 by rpki-client