Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/96627c5c-d55d-356f-9b9e-a0c3c4dc56f6.roa
File: 96627c5c-d55d-356f-9b9e-a0c3c4dc56f6.roa (raw, json)
Hash identifier: dgWa4V5yQjrsJ51rlgpVqBkQqjYuWElEdORGInR2h3s=
Subject key identifier: 2B:38:1A:BA:27:D8:C4:E0:E9:56:76:C6:2F:ED:B8:84:49:CA:ED:60
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213443D240EC668B9C0A4A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/96627c5c-d55d-356f-9b9e-a0c3c4dc56f6.roa
Signing time: Sun 09 Mar 2025 10:20:48 +0000
ROA not before: Sun 09 Mar 2025 10:20:48 +0000
ROA not after: Sat 07 Jun 2025 10:20:48 +0000
asID: 577
IP address blocks: 204.101.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:43:d2:40:ec:66:8b:9c:0a:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:48 2025 GMT
Not After : Jun 7 10:20:48 2025 GMT
Subject: CN=c80cd3e7-ba79-40c2-8e2b-f759879ed5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:3e:e7:8a:6b:71:3b:6f:20:70:e7:da:ca:
99:7e:32:34:24:de:99:76:9c:69:d2:b7:ee:3b:10:
fb:8e:93:2a:96:3b:19:8e:ad:ff:e5:bf:ce:31:0e:
11:4c:70:96:a7:04:26:6d:47:25:3d:b5:77:f2:18:
7f:22:5f:6d:30:2c:83:c0:1a:71:33:50:81:0d:2d:
00:5e:e0:1b:bb:f4:74:b4:7b:38:78:67:8b:9c:b8:
2a:fc:b1:e5:6f:3d:ba:ac:8c:ea:2b:50:46:27:84:
f8:5c:98:50:13:98:8f:d0:67:27:72:0c:5b:fd:d0:
11:9b:b6:56:75:fa:be:b0:4b:58:5a:7e:28:66:9c:
7d:bc:e7:29:b6:b2:98:5d:6c:d6:a4:12:6d:3d:f4:
4e:f2:cc:fa:b4:70:04:83:14:33:64:44:96:fe:f2:
94:80:d2:ca:89:7f:83:9f:80:a7:62:cb:80:61:dc:
3c:24:4c:f6:66:8d:6e:2b:14:c1:61:3a:83:60:dd:
18:4d:1a:36:d4:39:a9:20:61:58:ae:b1:9f:23:db:
fe:f6:3c:3e:43:6e:b3:f8:e5:2d:38:ce:8f:0c:46:
6f:b9:26:81:47:98:41:ef:ac:e2:a2:fb:3a:2c:7c:
52:01:6b:fa:c5:6d:1a:c1:8e:39:cd:e8:35:60:54:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:38:1A:BA:27:D8:C4:E0:E9:56:76:C6:2F:ED:B8:84:49:CA:ED:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/96627c5c-d55d-356f-9b9e-a0c3c4dc56f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:75:6e:dc:5f:cd:8c:b1:60:a3:ac:db:98:f5:02:35:75:9e:
0d:57:5a:f3:df:98:dd:23:3d:59:1a:bc:54:4a:91:f0:80:ef:
33:e2:f7:f7:15:c6:f6:2a:be:87:9b:00:ea:05:be:dd:22:92:
2a:1a:d4:55:1a:6c:9c:89:2d:be:30:fb:b6:ba:72:1e:44:ee:
d3:b7:29:49:43:44:eb:84:1f:17:08:ff:9f:ad:07:5c:b0:90:
94:f6:87:84:87:be:54:3e:26:bf:70:fb:81:3f:13:8f:31:ea:
0d:1e:42:eb:e7:d1:60:44:a1:11:2d:21:c4:96:3f:e9:cb:1b:
94:58:a7:ca:0a:fc:89:5d:69:c5:c9:2d:13:32:66:15:e7:85:
5a:3c:7a:b3:23:ce:79:5e:d3:94:c3:1e:8e:30:2c:25:2a:39:
cc:f8:12:cd:9e:bc:ba:8b:77:1a:a9:6b:b8:02:04:d8:7e:74:
42:fe:87:3c:4b:b6:cd:c1:fe:ea:05:5b:a1:e6:01:1b:ed:1a:
64:a2:01:34:aa:33:d3:2a:7a:38:d3:b5:a2:81:eb:25:d6:8a:
9b:c4:71:a3:29:3c:40:c8:33:94:a3:86:9b:24:1c:90:b3:23:
ab:0b:da:48:29:44:a5:4c:90:e9:c8:95:df:96:56:a3:c5:21:
bf:d6:eb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:51:00 2025 by rpki-client