Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a686d7cf-098e-35e8-baa4-c0f16b8b14cd.roa
File: a686d7cf-098e-35e8-baa4-c0f16b8b14cd.roa (raw, json)
Hash identifier: jukdcLbKwP4hg4IUh45egnegIfoBPFkt8deCb1zUxqY=
Subject key identifier: 4F:17:B7:35:D9:27:EB:ED:F2:4F:CE:9E:62:02:39:C5:3D:75:40:73
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5609F0B5637BE249902D0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a686d7cf-098e-35e8-baa4-c0f16b8b14cd.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 76.70.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:60:9f:0b:56:37:be:24:99:02:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=0fe68a92-68dd-4851-98af-8c61b6b1a7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:33:47:c1:67:29:77:13:6e:77:0a:d7:4f:
42:3f:8d:f5:87:45:bc:f0:ab:97:ab:21:16:c6:a5:
95:e4:91:c7:10:28:68:6a:83:68:cb:f2:d7:86:59:
12:67:e9:46:df:8c:1f:49:0a:3e:92:5a:bd:7c:3e:
62:42:b1:76:91:a4:73:e7:4a:27:69:c5:db:bd:cc:
7d:be:e0:26:04:ae:ba:a9:b8:3e:e8:5d:ba:dd:76:
86:31:2d:cc:2a:5e:89:d1:7d:88:69:45:0d:41:d0:
1c:72:95:04:a3:78:b9:80:e9:4c:a0:60:e6:b7:cc:
5f:f8:b2:62:eb:f8:7b:f2:75:b8:27:c0:8d:01:54:
14:36:7b:ce:cb:24:c7:0a:1c:60:5e:52:b6:fa:33:
f2:8c:c6:ad:fb:81:8d:14:3a:2e:93:76:30:2d:8e:
f4:2d:c8:6e:19:74:cc:73:a7:59:e8:e9:e1:76:4c:
08:fc:70:ff:12:dc:b3:ae:2a:28:d8:e4:6b:36:f7:
b2:e9:dd:8a:42:00:4e:2d:e9:04:fa:04:7a:f3:51:
25:21:10:ab:eb:85:3b:7e:dd:e6:37:c7:51:b5:0d:
7e:3b:cd:83:a3:db:93:68:8c:46:6c:44:31:a2:d0:
82:ae:68:02:dc:b0:21:0f:59:94:50:61:22:1c:f8:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:17:B7:35:D9:27:EB:ED:F2:4F:CE:9E:62:02:39:C5:3D:75:40:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a686d7cf-098e-35e8-baa4-c0f16b8b14cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.70.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:6f:42:35:9b:7f:68:a4:f9:b0:57:07:05:f8:4f:e2:b7:d8:
dc:50:77:51:50:78:73:23:2d:4f:e7:a5:80:a6:92:0f:03:e8:
d5:f6:77:54:34:f1:94:a4:fb:c7:35:ae:33:59:77:e8:e3:27:
39:11:58:32:8d:03:57:40:c3:b3:0a:e9:9e:3f:8a:ef:e9:69:
1c:6e:c7:21:e8:6e:b5:ae:0a:6d:e8:bd:2a:89:7f:db:5f:41:
a2:2e:30:33:76:72:86:8d:34:3a:1b:24:a7:3a:b0:cc:28:88:
a5:4f:7b:99:57:ab:b7:5f:d5:01:2d:b8:16:6c:15:08:0b:3d:
32:b6:11:61:19:a1:ee:00:73:5f:c5:65:80:84:6f:31:b8:97:
a3:14:72:b2:36:f6:2b:13:16:67:de:01:48:84:8b:5b:81:8a:
73:9d:56:e1:7b:b2:a8:e8:12:bb:e7:c1:94:b2:16:b6:22:d1:
d4:bd:5d:39:f0:e5:39:0c:45:8f:eb:28:e4:7f:2f:af:d7:ab:
62:9d:8e:a3:c8:e7:4c:82:96:8e:d7:74:81:28:6b:a5:97:00:
54:d3:9e:8a:25:63:ec:a9:fe:73:c3:d4:04:d7:cd:f2:71:87:
4d:8f:2e:35:a3:e7:8f:3c:71:6c:29:43:db:02:9a:9e:ee:22:
b0:ef:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:46 2025 by rpki-client