Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a40c8ecb-cb42-38b9-a403-f33f1c6433f7.roa
File: a40c8ecb-cb42-38b9-a403-f33f1c6433f7.roa (raw, json)
Hash identifier: qj9nx44xKBUBZHkPQpeQAt9TxruYdGwSUJIGQBwIvmU=
Subject key identifier: 33:8F:D6:E1:90:D4:3A:40:BE:CB:5B:15:F3:E9:79:05:01:63:A2:A8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921342D056DC07BA9C4FD6040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a40c8ecb-cb42-38b9-a403-f33f1c6433f7.roa
Signing time: Sun 09 Mar 2025 10:20:38 +0000
ROA not before: Sun 09 Mar 2025 10:20:38 +0000
ROA not after: Sat 07 Jun 2025 10:20:38 +0000
asID: 577
IP address blocks: 70.30.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:2d:05:6d:c0:7b:a9:c4:fd:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:38 2025 GMT
Not After : Jun 7 10:20:38 2025 GMT
Subject: CN=0c68ef77-3040-47e1-9900-feb4b0c32756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:e2:f4:75:b1:7e:86:23:a4:4e:0d:66:da:
97:1d:3d:e2:1b:96:08:91:fe:88:d3:d9:ad:d7:cf:
e0:b4:fc:09:e4:0c:4c:0d:4e:0f:21:e1:40:8c:3d:
8f:39:46:8b:b6:b0:04:a6:bc:4c:59:b8:96:9e:24:
48:cf:18:93:fe:10:39:8a:fd:84:8d:19:d4:28:21:
b1:39:1e:89:4d:80:e8:96:e1:c2:27:c6:a7:03:bd:
cd:bb:25:c8:4a:ad:7b:f2:3b:59:0e:3e:30:b2:03:
4e:3a:22:b2:88:df:60:ab:66:52:8e:33:5e:df:1c:
0f:db:01:0a:aa:a8:5d:16:7b:cb:80:61:45:ea:08:
bd:ee:0f:7d:77:f6:ef:c4:2d:df:69:1f:31:20:44:
f3:bb:9d:a4:2d:36:3f:0e:2f:06:19:e3:c3:e0:bf:
71:d5:43:a2:37:20:e0:9c:71:08:eb:64:e7:fa:24:
2c:07:64:ee:5c:ec:6e:60:e9:1c:6b:f1:21:e7:0b:
0b:a7:c0:d1:55:cc:98:8d:a1:45:89:20:94:08:52:
6c:97:19:b2:b7:ca:39:fc:40:27:af:5b:2f:1b:7b:
03:91:50:0f:0e:dd:d7:a1:ec:9d:ab:1e:d9:1f:0a:
85:3d:81:17:3c:d3:5e:de:51:26:1e:28:40:cb:81:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8F:D6:E1:90:D4:3A:40:BE:CB:5B:15:F3:E9:79:05:01:63:A2:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a40c8ecb-cb42-38b9-a403-f33f1c6433f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.30.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:45:70:88:85:87:b6:8f:e4:90:dc:d4:35:8f:eb:04:3a:41:
60:13:64:88:59:45:6c:0c:57:bc:1e:83:9e:57:b3:72:69:f4:
0a:f9:0b:16:34:7d:d2:41:27:4b:af:bd:7b:97:5e:0d:e2:3c:
cc:21:56:18:54:76:5f:12:eb:6c:2f:f7:41:2a:17:39:25:d8:
5b:39:3b:33:73:89:c6:6d:1a:47:2f:5c:c5:fd:82:a5:b4:86:
63:93:7c:0b:e9:66:09:dc:7a:46:51:e2:7b:07:53:59:85:31:
2b:a0:79:a3:8f:0f:38:0a:b5:0f:60:5a:e9:2a:89:70:70:f1:
de:f8:47:ac:a7:62:26:84:af:fd:20:bd:de:c3:05:83:78:6d:
93:2c:bd:8c:4f:df:ce:8e:49:a7:e2:b3:22:27:04:2c:47:12:
e0:1f:f5:56:06:38:ae:9b:60:bf:57:56:6c:a0:6b:fe:b0:b7:
87:2b:2f:16:8c:e4:24:08:86:d5:c2:db:dc:42:67:11:8f:4a:
da:ad:0d:19:aa:f6:62:56:9e:ee:2b:2d:9e:93:f2:ea:7b:26:
b9:14:2b:a9:78:76:20:36:83:7a:8e:98:24:94:bf:eb:48:6a:
05:04:73:da:76:c0:6f:43:73:3b:86:45:c7:06:23:0d:b6:d2:
bb:dc:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:37 2025 by rpki-client