Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6ca5bf3-f2e9-379f-8ead-f895a46b7709.roa
File: a6ca5bf3-f2e9-379f-8ead-f895a46b7709.roa (raw, json)
Hash identifier: vp3VV5h1Li7joFXH40vXeYwf2WIOHvowLzaaUoMjI24=
Subject key identifier: A4:FA:79:81:7D:64:D7:55:6F:F4:51:AE:5A:64:F7:61:E0:6E:34:4E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2B1B4E9DD622B2F9B94700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6ca5bf3-f2e9-379f-8ead-f895a46b7709.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 209.71.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:1b:4e:9d:d6:22:b2:f9:b9:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=cd0f8265-1c86-427a-b8fc-df58790dd481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:1e:dd:da:13:f3:00:5c:35:eb:25:ae:9c:
11:b7:65:cb:4b:a2:d0:b4:3c:0a:1f:7d:88:e8:3a:
33:1e:a1:59:1c:04:6d:76:b6:27:06:2a:20:70:64:
94:ad:a9:5f:31:26:7a:eb:64:63:83:3c:19:2d:ca:
db:a8:a2:cf:c1:37:dc:2a:ff:86:88:04:26:44:64:
84:a2:e7:50:fe:77:13:03:c8:6f:9a:8f:a8:dd:83:
bd:ea:38:7e:89:8d:c7:88:27:a3:a3:b0:20:f5:22:
e9:ab:8f:41:fa:02:6b:65:90:ad:13:68:42:a1:a6:
8c:d2:dc:f5:02:cb:db:47:44:02:5b:68:f9:0d:32:
75:7b:c5:fd:72:99:bf:c1:3e:63:74:96:20:c4:b4:
5b:81:29:15:6b:e5:41:5b:0e:e2:f9:47:a6:1f:2c:
67:83:c7:e1:11:6f:4b:39:d8:93:cf:8b:15:9c:1a:
cd:5a:8f:fa:35:0c:f9:c9:05:69:0e:72:46:c9:21:
e2:6c:82:33:29:9c:91:8f:fe:a4:f2:c7:a0:cd:55:
56:2d:05:79:95:f4:15:3d:7d:48:a0:c7:31:62:67:
ce:fd:16:c2:eb:d2:e7:13:21:f0:93:df:92:a3:09:
5e:df:58:a1:23:96:74:14:24:ce:65:af:8e:b1:ba:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FA:79:81:7D:64:D7:55:6F:F4:51:AE:5A:64:F7:61:E0:6E:34:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6ca5bf3-f2e9-379f-8ead-f895a46b7709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:43:d0:33:74:df:b6:fb:8a:87:ab:61:2a:53:cd:6b:99:06:
09:ad:fa:e5:3f:01:71:16:6c:11:fd:d5:f9:80:c9:f2:37:33:
51:28:d0:ac:78:8f:f4:8c:9c:53:1c:d7:92:87:4f:30:cb:3c:
a7:cf:e0:c7:61:6e:3c:a8:93:79:eb:c9:5e:90:3f:76:f0:26:
25:ea:52:f4:69:b8:d5:ac:a8:42:5b:78:a5:a7:4b:de:ac:c0:
4b:37:fa:94:a2:16:df:35:73:f9:6d:53:74:e5:a1:ff:d7:88:
b5:c1:6b:93:73:3c:17:03:7f:a8:aa:19:76:9c:96:42:dd:55:
a0:46:ee:5e:5c:52:65:4e:e2:a5:80:8a:5a:ea:c4:07:d4:a1:
86:fd:49:8e:5e:24:09:01:d3:a3:7a:d2:84:5f:de:eb:7a:72:
2b:ac:2d:fb:42:cb:80:26:0a:ee:63:2a:bb:60:fb:a0:55:43:
ec:d2:34:f1:5e:69:29:08:db:80:17:80:c2:ee:51:4f:1c:c6:
12:ab:e2:d6:33:22:83:91:fd:45:28:a6:23:58:15:6b:7c:ad:
1e:7e:8c:fb:fe:b0:18:62:7a:0d:e3:f2:59:8a:c6:71:3e:1c:
c2:97:05:19:b2:9a:1b:25:d4:05:f5:18:3b:c8:3e:39:79:eb:
b5:cc:83:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:41 2025 by rpki-client