Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9e3f2aa6-bf85-3aa8-a593-e7efd21e40d2.roa
File: 9e3f2aa6-bf85-3aa8-a593-e7efd21e40d2.roa (raw, json)
Hash identifier: e1RtOTpwAbTkJ4hep6LYw6eVVH4K1WDX3Ei5UHYi13k=
Subject key identifier: F2:52:9C:21:62:B9:91:FE:C5:0E:CC:2E:5A:FB:1D:5E:14:26:52:64
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B558872995E6FB9E03E280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9e3f2aa6-bf85-3aa8-a593-e7efd21e40d2.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 76.67.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:58:87:29:95:e6:fb:9e:03:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=9b73fb45-25f2-453f-9051-f922e9e89a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:2c:b3:a3:47:ba:89:87:3a:37:10:5c:71:
b9:42:ac:5a:dd:2d:03:f8:c0:a8:67:6f:96:05:fb:
0f:d5:e7:d9:a7:63:20:91:f0:ea:0b:b3:14:62:11:
fb:32:d4:9d:fd:ba:a7:fc:6a:ab:b3:59:23:bf:fd:
f5:8e:74:0b:68:26:99:63:13:a4:9e:be:5a:5f:1d:
46:a4:d5:63:96:c2:0d:93:55:76:fc:cc:d8:00:48:
7b:84:4a:8b:8e:3c:10:f7:c1:9c:da:a2:1c:bb:5c:
96:5e:78:9d:ec:58:1c:95:c8:4d:a4:0d:fb:47:1c:
8d:cf:de:e2:5e:8a:8c:6e:f4:f2:54:05:dd:c2:9e:
e3:65:d0:b8:85:6e:3c:b5:5d:26:d8:be:81:bb:f5:
05:45:6a:08:ab:2f:e0:06:e3:74:bf:81:7c:3a:07:
34:8e:9e:40:c5:cb:5c:47:b1:2d:e6:6d:23:f8:3d:
11:ac:f0:21:de:f4:0c:fd:08:fd:e1:34:19:25:d1:
c9:6b:fb:d0:fe:26:bf:1c:81:b0:31:1e:48:23:ea:
1a:56:ed:0e:0c:b1:23:5c:37:3f:a3:81:a7:bf:c9:
d0:49:2c:fd:c2:14:e0:e3:04:ea:0d:88:f1:1e:b3:
2f:be:f1:c5:61:0e:05:de:39:35:31:8d:99:f9:ed:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:52:9C:21:62:B9:91:FE:C5:0E:CC:2E:5A:FB:1D:5E:14:26:52:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9e3f2aa6-bf85-3aa8-a593-e7efd21e40d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.67.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:3c:2f:1c:26:40:3d:a6:bf:82:c4:92:a9:d2:d9:2b:82:53:
53:ea:4b:30:38:14:7b:12:7e:25:1b:08:f0:af:36:4e:2d:a5:
5b:eb:ff:7a:79:44:d3:86:f8:58:3e:d9:22:33:a9:a3:41:6a:
91:19:20:c8:ae:b0:22:26:8b:e4:80:32:d1:30:6b:2f:45:6a:
ff:c1:2e:d0:78:fd:12:f8:21:4e:2a:9f:63:86:45:78:23:fc:
94:ef:70:58:90:f7:99:93:eb:f8:62:ff:1e:47:6b:5e:d6:da:
d1:3d:65:3d:23:69:7c:c1:e0:f8:81:d2:74:26:1c:3c:97:1a:
3e:e6:87:95:82:2e:b2:f4:7e:e1:06:aa:f6:cd:b5:c0:6e:3c:
d5:a9:55:8b:c5:eb:e9:df:e7:5e:7a:d1:13:b5:49:93:27:71:
9e:d2:37:b0:f7:1a:be:61:e3:4d:32:d8:9c:c0:83:58:7c:13:
21:09:53:23:e3:2f:df:e2:ff:8a:4f:cd:f6:bd:28:09:a2:9b:
f4:e6:e2:f8:dd:d2:8b:de:e2:cc:6f:5b:8e:d1:7a:67:a4:04:
6a:df:e2:33:43:dd:84:9e:8f:4c:d3:ef:23:36:d5:05:30:5a:
b3:ff:9a:50:5c:06:7c:dc:22:7d:21:6c:87:43:c2:36:c3:1c:
52:f8:a3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:17 2025 by rpki-client