Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/94a355e0-b6f4-3f80-8dd0-74cdd9ad0ca7.roa
File: 94a355e0-b6f4-3f80-8dd0-74cdd9ad0ca7.roa (raw, json)
Hash identifier: YD+xwfqufudoelVTVx9iGF+929LzuJ+uAj0tkLvjKhI=
Subject key identifier: AB:0B:1A:60:89:28:70:F4:13:FF:1B:CC:AA:B2:FB:C6:0F:1C:04:2B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134453BD6733B2080164900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/94a355e0-b6f4-3f80-8dd0-74cdd9ad0ca7.roa
Signing time: Sun 09 Mar 2025 10:20:49 +0000
ROA not before: Sun 09 Mar 2025 10:20:49 +0000
ROA not after: Sat 07 Jun 2025 10:20:49 +0000
asID: 36522
IP address blocks: 204.101.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:45:3b:d6:73:3b:20:80:16:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:49 2025 GMT
Not After : Jun 7 10:20:49 2025 GMT
Subject: CN=4e47561c-16be-43d6-9e5b-2d49c598c90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b3:9c:58:cd:70:57:e1:b7:00:91:c2:c9:fe:
e7:c5:44:8d:86:03:7a:af:fe:a9:19:b6:14:1e:d2:
d4:57:0e:65:b2:3d:6a:ec:e2:e9:2f:1e:3b:ba:84:
85:44:f2:ac:4a:c6:35:68:2c:17:4f:b6:d3:57:61:
b6:28:07:df:6e:2c:17:51:24:a3:ff:d2:07:0c:03:
65:70:38:c0:fb:24:9f:84:bc:9b:18:10:b9:8b:4a:
21:60:39:25:85:57:c9:03:fc:95:7a:b2:47:b4:c9:
8e:d5:63:f4:4c:3d:48:ff:a7:d8:01:87:01:96:52:
b4:4c:2a:20:39:84:d7:1b:fd:da:bd:df:45:f6:65:
71:c4:58:c8:f2:a7:33:c2:dc:2c:73:27:8f:ee:34:
21:36:b7:8f:7f:65:46:a2:e8:fb:26:92:01:40:e1:
9b:ed:49:bc:cc:db:7d:1c:6c:98:f8:be:0d:5e:19:
ac:25:29:c3:8a:63:dd:6d:30:ed:0e:11:d2:b6:0b:
3d:79:70:62:9e:e4:42:a4:9a:5b:bf:69:fc:c0:cb:
88:2f:61:a1:e3:e6:41:cf:db:24:3d:88:2b:75:cb:
39:b1:fd:3b:08:41:5c:1a:9f:46:1c:f9:02:cf:9c:
3f:00:93:f2:4b:b7:64:a4:cb:01:68:3f:9a:32:d0:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0B:1A:60:89:28:70:F4:13:FF:1B:CC:AA:B2:FB:C6:0F:1C:04:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/94a355e0-b6f4-3f80-8dd0-74cdd9ad0ca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:03:2d:d6:5c:63:b6:93:b4:e1:10:6a:83:69:f7:6e:b7:3f:
12:b0:21:97:96:14:03:25:61:c5:86:99:9b:85:78:f0:42:bf:
08:30:c0:f2:dd:11:1c:6d:87:1e:c0:2a:5c:f5:6d:c1:61:9d:
0c:37:eb:51:4f:25:d7:2c:67:02:b9:30:76:e0:4d:5a:03:52:
63:27:df:65:a1:de:da:72:7c:4a:0e:10:66:52:22:73:8e:d8:
8a:39:a4:a4:a7:66:66:be:c6:f8:32:e3:c4:be:f2:72:46:b0:
d1:ad:1b:55:f8:85:13:79:60:3a:81:00:34:86:c7:cc:94:5b:
d8:93:19:19:d4:37:74:e9:e6:c8:d8:b0:ea:b7:7f:90:66:18:
92:f7:26:6e:2a:45:14:f4:69:ac:95:69:c6:e8:7d:02:d0:ec:
63:0a:21:97:ae:0c:45:78:ba:83:24:57:af:c6:e0:6b:80:2f:
7d:b4:90:34:86:3c:a2:85:34:7c:e0:a3:53:d1:4d:30:c9:1b:
1d:44:a9:3d:a9:21:5a:5b:d2:0b:93:41:ca:c4:4d:2c:9e:bd:
61:ec:7d:93:d0:70:75:b8:e0:de:23:44:9e:6a:c2:34:01:c4:
91:92:fd:0d:de:73:20:aa:39:df:d4:88:a2:95:98:13:c6:ab:
87:34:7c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:35 2025 by rpki-client