Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/97238369-55d5-379e-bb1c-144d6e4f2625.roa
File: 97238369-55d5-379e-bb1c-144d6e4f2625.roa (raw, json)
Hash identifier: qi6+q6lAJ4ldvWTGu1jznkKotmhNMWb9hZgPBLfZ/Fc=
Subject key identifier: 80:88:D9:D3:00:C8:DF:D0:43:85:AD:AF:88:CE:F5:9C:0C:EC:E5:0D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7992AAFB93657F1BEA7E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/97238369-55d5-379e-bb1c-144d6e4f2625.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21723
IP address blocks: 209.226.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:99:2a:af:b9:36:57:f1:be:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=6aa8e105-34e6-40b2-96b5-42715fb04116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:d0:0c:9d:d9:1b:e6:c1:20:a4:5e:31:ea:
2b:99:69:65:13:e9:5f:ae:d9:c9:40:ad:79:21:b3:
cf:0d:c2:cc:46:40:55:44:db:d8:53:68:fe:9f:f7:
97:40:09:5b:8a:c0:24:0c:02:5e:d8:9b:ac:04:98:
af:86:cb:d7:9e:aa:85:0d:bc:ad:bb:a2:f2:c4:f2:
bc:eb:19:81:ba:31:52:61:6b:91:40:39:86:13:9b:
05:50:95:ad:41:a8:0d:ce:67:79:33:ce:6a:4d:01:
e1:25:88:39:e0:54:c6:80:48:a0:bc:7b:50:ce:93:
27:3e:77:cf:13:2d:c5:1c:75:4b:b4:47:35:cd:14:
10:d6:23:bd:c4:97:ab:1f:75:4a:4f:48:c3:44:ff:
d2:45:c3:66:4f:fe:74:b5:45:93:65:b9:67:fa:eb:
10:02:2b:5f:80:fe:0e:17:94:c4:5c:d0:44:c8:39:
dd:90:63:ce:e7:e3:ee:8a:ba:88:4d:18:91:76:26:
0e:c4:bc:28:c5:0d:51:6b:79:68:0d:c4:79:95:c8:
e3:ec:47:1d:a7:1c:29:15:c1:bf:d9:4d:37:06:04:
74:07:1c:7d:33:b4:61:a7:8c:27:d9:66:a7:30:59:
28:54:64:83:51:87:86:eb:08:f0:60:c4:78:ba:6d:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:88:D9:D3:00:C8:DF:D0:43:85:AD:AF:88:CE:F5:9C:0C:EC:E5:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/97238369-55d5-379e-bb1c-144d6e4f2625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:33:60:6d:42:c3:f8:ca:f5:bb:6f:0d:c3:56:b0:28:52:26:
5c:d5:90:64:6c:70:51:29:a9:01:82:9f:02:f2:07:ed:b9:e1:
00:b9:ee:4a:99:4a:a0:24:de:ef:30:85:29:97:31:7e:7e:37:
af:92:41:47:f3:db:fe:cf:88:41:84:84:aa:7e:ad:99:69:2c:
d4:76:45:99:1e:64:d0:ad:61:da:6d:a3:f1:01:52:3b:54:68:
46:09:23:69:bd:ea:6a:1e:f9:26:fc:c3:2e:22:08:c3:14:b3:
83:8c:10:f0:b3:46:4e:fc:c5:cd:d9:aa:87:70:5b:9b:fe:9b:
c9:48:4b:d6:09:08:88:5d:80:2f:9b:57:4f:aa:d8:ef:88:a4:
da:a1:3c:3b:76:f3:4e:62:1d:94:e8:ef:a8:6e:cb:e3:a0:7a:
50:c4:2c:30:20:c1:b4:4c:06:eb:42:4f:0f:24:98:e9:a5:d1:
04:94:0b:1a:19:ca:9c:02:d5:40:16:2a:86:65:68:38:0a:96:
df:be:be:08:b0:bc:95:03:c2:31:5c:85:77:f9:48:35:75:1b:
4a:ae:57:03:42:22:47:fd:94:e2:94:40:fd:11:2f:1c:61:62:
05:2f:25:94:b1:55:cc:37:14:e7:a6:20:4e:70:31:1c:87:a0:
5c:76:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:33 2025 by rpki-client