Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ab83d8d8-6841-3cd7-b77d-8cdc21dde7ea.roa
File: ab83d8d8-6841-3cd7-b77d-8cdc21dde7ea.roa (raw, json)
Hash identifier: VJQ0UtUCpk8TWL0aXHkgEyZ1NM4hXKR9O8kmJuiTYnk=
Subject key identifier: 32:CA:C0:BE:B6:DB:91:CA:E4:1F:E3:CD:54:94:4F:66:1F:58:27:E6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134635C508E4FA447455F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ab83d8d8-6841-3cd7-b77d-8cdc21dde7ea.roa
Signing time: Sun 09 Mar 2025 10:21:03 +0000
ROA not before: Sun 09 Mar 2025 10:21:03 +0000
ROA not after: Sat 07 Jun 2025 10:21:03 +0000
asID: 21552
IP address blocks: 209.226.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:63:5c:50:8e:4f:a4:47:45:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:03 2025 GMT
Not After : Jun 7 10:21:03 2025 GMT
Subject: CN=bd8e6d36-a921-41e4-b136-155026e793da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:c1:ef:25:99:8e:ff:2b:65:dd:16:8b:4a:
17:d8:19:81:4a:8f:8e:66:e4:62:47:da:00:1f:8b:
15:c5:97:3c:1a:f6:f7:f0:6b:d4:13:99:c3:00:a4:
58:d9:5d:7a:6b:b5:bf:d6:a1:80:32:42:39:72:aa:
21:e4:d5:a9:6e:96:29:b9:1b:c8:dc:05:a5:e4:4c:
ec:64:0f:01:67:03:5d:31:42:af:0a:e1:ad:49:3a:
b6:43:cb:cc:6b:f4:34:6f:71:36:ec:20:2a:4e:ff:
55:19:26:a2:58:dc:7e:1c:79:6f:82:77:7e:01:5f:
9a:60:06:3a:c0:c5:31:e4:28:d6:6b:66:fc:38:bc:
7c:4e:c1:0e:bb:92:f9:6b:ee:ae:c9:18:74:57:f7:
5d:64:22:23:cd:47:45:06:9d:dd:ec:35:aa:e5:e7:
66:29:7f:1f:7f:67:c2:a4:f8:7d:39:e3:0d:18:5b:
70:7c:17:56:20:55:a7:7a:db:76:d6:63:92:87:2b:
ea:e6:60:34:17:14:91:ab:e9:2f:71:de:a8:cd:a8:
12:cd:de:fd:21:a4:c0:7c:38:62:c7:81:05:53:89:
62:ee:75:0e:df:4e:b1:0c:2b:67:17:ff:df:4c:c5:
1a:47:3b:a0:01:8c:5f:37:73:a7:ed:29:21:e8:db:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CA:C0:BE:B6:DB:91:CA:E4:1F:E3:CD:54:94:4F:66:1F:58:27:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ab83d8d8-6841-3cd7-b77d-8cdc21dde7ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:fd:1b:ab:69:fa:ae:44:1c:78:26:85:33:70:85:4b:ed:f4:
d6:58:87:93:70:8c:f7:a4:e6:6d:8a:d9:85:68:56:3b:0e:c4:
6d:ce:1d:f5:7d:66:c9:a2:b0:83:d0:1d:7d:6d:a7:f5:3a:3c:
9d:b4:44:8d:ac:99:4a:40:e2:56:10:b2:c8:9a:6b:b5:5c:64:
27:9a:2b:f4:cd:aa:ad:7e:c7:9b:93:90:1e:58:5a:af:48:56:
c2:ca:2b:8d:8f:8e:3b:7c:24:81:01:df:05:60:81:d5:c9:55:
f9:0b:08:a1:bb:47:18:3d:fe:8a:a1:a3:fb:f1:a1:77:0e:39:
17:08:50:8e:4d:c3:aa:c7:dc:c8:2f:c8:56:b3:f9:7e:94:f7:
b2:cf:7a:de:af:f6:35:7f:30:64:ce:f3:11:e6:98:a9:6f:a8:
24:37:9b:1b:81:59:57:af:4b:c1:53:37:fd:78:d6:17:0e:ff:
dc:e5:6f:10:a9:2f:6b:50:d0:f2:57:d0:46:e6:21:58:a8:28:
cc:94:ff:94:20:66:f6:2a:e5:41:a0:76:1c:39:49:63:0d:e3:
fe:87:9e:71:af:27:4d:55:86:2d:c4:ca:a8:2b:66:a9:0f:a4:
09:0b:75:f9:8a:28:af:a5:23:6a:46:65:d6:7c:ee:7d:a8:0d:
b7:18:3c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:39 2025 by rpki-client