Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/935a64af-f99f-3375-9401-c15aecd9a784.roa
File: 935a64af-f99f-3375-9401-c15aecd9a784.roa (raw, json)
Hash identifier: H9LObXnv7WxSegciceMonUJAvUhoiSoQpn8sd0k0HVY=
Subject key identifier: 8A:DF:12:26:5E:B0:DB:11:C9:93:DA:82:05:43:48:E0:0B:83:EA:E6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213467A2420B15B79146FF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/935a64af-f99f-3375-9401-c15aecd9a784.roa
Signing time: Sun 09 Mar 2025 10:21:05 +0000
ROA not before: Sun 09 Mar 2025 10:21:05 +0000
ROA not after: Sat 07 Jun 2025 10:21:05 +0000
asID: 35911
IP address blocks: 209.226.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:67:a2:42:0b:15:b7:91:46:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:05 2025 GMT
Not After : Jun 7 10:21:05 2025 GMT
Subject: CN=1feb7748-0c42-4b32-b93e-b64c399f786d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:2d:fb:fd:66:4e:35:4c:39:91:66:bc:25:
1b:08:ef:95:60:68:0d:57:0e:40:a5:63:4a:63:94:
d7:2b:b5:af:aa:47:8e:ef:ec:a1:dc:3a:f5:a9:63:
70:61:fc:f6:97:95:44:0b:b5:a3:3e:1f:d8:f8:fa:
fd:e8:1d:87:50:d5:3f:42:6a:92:f2:08:64:4a:05:
54:48:f9:03:0d:d0:18:8d:98:1f:6e:b7:ad:30:ec:
c8:f6:16:41:2a:5a:bc:e1:05:0d:dc:64:02:51:25:
d8:a3:42:5f:48:c6:80:03:5f:40:1a:1c:60:6e:c4:
e7:4b:6c:3a:94:b4:a5:b3:72:6a:0d:dd:a5:2b:77:
de:33:f0:4b:7e:b7:8e:10:da:59:d3:66:d5:f8:7a:
93:91:64:a3:81:63:b6:bd:8f:35:c9:72:fd:f2:67:
8b:1d:1b:88:15:32:c2:b2:46:4f:cc:05:cc:33:c6:
3f:8a:15:3f:8a:1e:60:54:74:c2:6e:5d:7d:d7:4a:
9f:c1:93:0d:7d:ad:33:70:84:cf:9c:7b:66:1e:9f:
dd:3d:e8:1a:86:54:0d:19:3d:fd:c2:83:cf:01:43:
83:a8:6e:b0:c3:fe:6d:e8:25:6e:7d:14:d6:6e:11:
0e:45:9a:c9:91:2c:53:71:d6:9f:ba:93:90:2c:d0:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DF:12:26:5E:B0:DB:11:C9:93:DA:82:05:43:48:E0:0B:83:EA:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/935a64af-f99f-3375-9401-c15aecd9a784.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:59:34:57:65:b6:88:67:12:cd:c1:23:6f:99:1f:b4:83:b4:
e2:3b:98:74:71:90:b4:ce:67:04:59:41:2f:94:67:fc:55:7b:
f3:5b:22:dc:7e:9f:5f:a1:87:8a:ee:32:11:74:e2:08:a6:11:
80:71:6c:cd:9f:7f:6c:07:af:6d:27:e3:58:16:e1:38:a9:a3:
79:76:5f:73:8c:21:b4:da:0a:66:12:5d:80:39:92:73:ad:12:
92:bf:eb:e6:cf:a5:19:ce:30:6a:a0:94:d9:aa:0e:22:19:b8:
b5:e1:9c:27:bf:8b:65:dd:71:b5:d3:9b:1d:b3:78:aa:88:19:
cf:ca:cb:24:83:d4:da:5f:19:96:90:9d:57:32:e3:d5:3f:fa:
3e:1e:05:55:f7:16:03:ab:55:6b:91:f8:89:64:a6:ff:f3:e5:
1f:69:35:6a:36:6b:5a:a0:3f:7d:d4:09:ce:66:c7:0a:05:61:
72:1d:fe:28:39:50:94:aa:17:85:f4:85:67:98:09:96:3c:c7:
b3:34:57:23:5c:e0:91:6e:86:dc:fb:48:33:e6:7c:60:ce:b6:
0e:15:3b:f4:93:07:ad:1e:b8:ab:10:66:91:d3:b8:fc:bb:a2:
84:b9:1e:b4:79:47:d9:36:a6:8b:ff:d8:a6:ac:ee:aa:80:a2:
6b:b9:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:37 2025 by rpki-client