Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d27927d-9a5c-3e2c-b80b-6fdff6fa348e.roa
File: 8d27927d-9a5c-3e2c-b80b-6fdff6fa348e.roa (raw, json)
Hash identifier: N2n8fnJ74mT3yQWqzO0PNh2gKTxo3OjTEyVvB0yNbpc=
Subject key identifier: A7:C8:45:20:49:D7:C7:54:42:E8:E1:B6:C2:AA:1D:A5:10:6F:DC:A8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343A70C406C54C8E9CA480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d27927d-9a5c-3e2c-b80b-6fdff6fa348e.roa
Signing time: Sun 09 Mar 2025 10:20:44 +0000
ROA not before: Sun 09 Mar 2025 10:20:44 +0000
ROA not after: Sat 07 Jun 2025 10:20:44 +0000
asID: 7122
IP address blocks: 198.163.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:3a:70:c4:06:c5:4c:8e:9c:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:44 2025 GMT
Not After : Jun 7 10:20:44 2025 GMT
Subject: CN=c558d8d5-5ecf-47d7-9338-bcc623788ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:47:38:f0:0c:ef:81:20:7c:d4:a0:4b:59:82:
46:8a:e8:8e:0f:a7:55:17:f5:ee:b8:8a:90:a2:2d:
ff:99:cf:42:c7:b2:d4:07:31:fe:1f:e8:f5:1d:88:
9d:5c:42:4d:84:f1:fd:59:43:97:21:98:96:1b:d3:
d6:a8:8f:5a:88:f3:1d:00:d3:d0:c3:8d:66:6c:eb:
71:b4:e5:0c:9b:c7:64:d6:28:29:b3:17:91:26:70:
49:23:d3:43:6c:83:9a:1e:80:52:03:b8:07:59:88:
98:b8:20:55:e8:59:db:d3:3c:7b:2a:fb:1d:21:3f:
68:55:e9:e4:18:97:fc:59:97:a3:74:f6:57:28:bc:
8d:96:6e:dd:2d:a5:cb:c0:e1:88:e9:0d:19:76:01:
4f:5d:ff:02:a9:64:d2:3a:41:fc:a7:91:da:29:4a:
80:36:94:ee:f0:db:93:92:a1:b0:cd:1e:8a:07:02:
e7:a1:18:42:06:aa:7f:44:c5:06:39:9d:2e:f7:e4:
d0:65:45:4b:be:0a:f0:d6:e9:9e:0f:94:77:a4:be:
44:4f:d9:f4:d1:2c:fb:a7:90:35:b6:f3:fa:d9:f2:
ce:fd:5f:91:2a:6e:c1:c7:f1:2c:fb:9f:c5:34:67:
df:36:08:28:d7:da:1f:62:18:4a:63:38:e7:23:01:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:45:20:49:D7:C7:54:42:E8:E1:B6:C2:AA:1D:A5:10:6F:DC:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d27927d-9a5c-3e2c-b80b-6fdff6fa348e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.163.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:85:7d:22:f9:fb:b6:99:32:c7:38:b3:73:63:14:5d:13:ff:
7d:00:83:58:e1:60:eb:6b:70:f9:cc:f7:90:55:da:23:c3:28:
38:72:d7:bd:ca:43:f7:e8:c1:f5:96:ed:19:e7:03:22:08:c5:
38:1e:76:fb:99:27:80:1c:24:43:57:fc:68:48:66:20:ec:59:
13:b5:4f:b4:40:95:d1:97:b5:3c:9a:37:8e:84:7a:30:60:5b:
db:75:c5:63:04:d4:76:fc:3e:44:1b:2e:2e:55:36:7b:8b:cb:
3a:cf:db:3f:f3:9a:01:e0:6c:62:c7:02:40:01:b5:7c:b1:46:
12:b9:2f:52:f2:81:83:dd:9a:d4:b2:3e:3e:c2:d9:48:9b:7c:
49:13:ba:1e:c6:95:5e:47:b5:2b:ba:88:39:f1:c5:ca:88:37:
69:d2:dc:42:be:c9:e7:df:dc:9f:1d:85:7d:a0:ed:85:8c:ba:
4b:10:cd:f1:26:c1:22:d4:05:0a:a5:60:cb:34:e9:7a:fe:02:
fa:78:f2:0e:ea:1c:aa:70:94:23:3f:92:31:6a:9d:bf:28:bc:
15:68:c9:15:6d:aa:54:54:19:da:12:8e:ac:fe:fc:99:2e:4a:
3b:6c:8c:67:94:3d:47:0b:57:f7:a3:22:f4:60:16:40:7c:e6:
ac:6b:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:26 2025 by rpki-client