Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a30fc023-bbfe-3bc7-8f82-bd03e2b91804.roa
File: a30fc023-bbfe-3bc7-8f82-bd03e2b91804.roa (raw, json)
Hash identifier: WQIXNIZmzGtDiJhZ/Zt/iAdAtljmPMhC93bGudnlZO8=
Subject key identifier: 3C:53:77:4F:4C:7D:65:11:3C:9A:4D:AB:07:C6:48:C0:45:91:E1:12
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213429BB8C3829D8816817C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a30fc023-bbfe-3bc7-8f82-bd03e2b91804.roa
Signing time: Sun 09 Mar 2025 10:20:36 +0000
ROA not before: Sun 09 Mar 2025 10:20:36 +0000
ROA not after: Sat 07 Jun 2025 10:20:36 +0000
asID: 577
IP address blocks: 67.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:29:bb:8c:38:29:d8:81:68:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:36 2025 GMT
Not After : Jun 7 10:20:36 2025 GMT
Subject: CN=cbb8b524-579f-4b32-aad8-026b467c4da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:b0:24:6e:02:8c:0b:c9:1c:b1:9c:0a:3c:
77:4a:17:a7:43:c9:41:4a:4f:0d:01:f2:bc:bb:4e:
08:52:ec:db:23:d5:17:4b:6d:27:04:25:60:14:f4:
c6:c7:c8:fe:b3:ab:33:8c:d2:d3:73:0a:9f:f3:ad:
f9:1a:1e:f4:0b:6c:7a:ff:6b:05:79:37:84:a5:e4:
a8:ac:f4:4f:ad:c9:1e:97:d4:0e:ea:1b:68:0d:87:
ba:64:1e:28:d5:46:82:9b:2b:ed:38:29:a3:1d:ea:
b3:89:df:01:0d:26:82:f2:f3:e8:8c:de:a4:92:62:
b4:86:f9:df:65:32:e9:6c:fb:3c:48:8a:92:d2:10:
58:e3:f8:f1:51:63:2f:45:7e:1d:37:87:97:75:c7:
22:12:46:a5:b4:dd:e8:dc:c8:62:45:5f:70:3d:9e:
11:81:e5:1d:61:98:d5:e4:86:82:8b:49:56:00:75:
95:00:df:2d:4a:f6:dc:cb:54:94:2b:c3:30:f2:d6:
a0:fa:a8:ce:f2:3d:c0:f3:e3:bf:bf:b4:b8:63:a2:
8c:3f:c0:90:89:99:c9:bc:68:19:b4:0d:09:7f:61:
fe:9d:80:a0:65:e4:65:00:85:50:27:f5:b3:d0:27:
0c:74:c2:b2:7b:a0:bb:49:52:65:1a:61:00:13:f2:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:53:77:4F:4C:7D:65:11:3C:9A:4D:AB:07:C6:48:C0:45:91:E1:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a30fc023-bbfe-3bc7-8f82-bd03e2b91804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:cf:44:5b:ba:77:ef:0e:6f:14:b7:c7:a0:38:d7:ef:2f:c9:
c0:ea:a6:3b:22:bc:ce:ba:84:8f:ca:b9:98:66:ab:e2:f9:99:
f9:28:1a:ab:3e:08:e7:2e:8a:0b:ff:f3:ea:2e:9e:76:9c:ce:
d7:36:5c:97:ef:26:93:cb:d5:fb:7b:bf:48:39:38:6e:34:cf:
6c:f3:dc:6a:82:24:7a:30:0f:70:68:e6:09:c7:84:c7:70:1a:
fb:bf:b8:00:94:55:3d:02:c9:22:be:f7:7e:1d:20:99:60:64:
84:2a:68:a1:6a:88:aa:08:b2:99:9f:1d:c2:a2:28:1a:24:a5:
05:f5:7c:89:29:00:75:79:47:3d:13:8e:17:36:95:ff:94:7c:
0f:b8:c2:83:1f:8c:12:0e:11:3e:e0:2e:53:30:41:66:a5:aa:
6f:78:6f:56:69:88:63:58:4f:7a:8e:09:e5:e0:fb:ab:af:34:
13:75:fe:70:3c:86:57:78:a5:b4:63:c9:0c:13:1d:cb:20:3f:
df:5c:58:13:90:30:2b:70:e4:c7:6d:80:62:59:9b:0c:61:52:
0d:86:d0:a9:48:fe:13:be:7a:6c:98:37:d3:8e:dd:ae:11:de:
2b:73:66:a8:36:25:62:f5:85:d1:94:85:fc:23:f8:84:ed:54:
ff:e7:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:43 2025 by rpki-client