Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8f7259c-f9fe-30f6-bb55-039b13987256.roa
File: b8f7259c-f9fe-30f6-bb55-039b13987256.roa (raw, json)
Hash identifier: HgBIDQr7VQOZ+BmSquTvgi4Mx29exTRkoBq6SXOj25o=
Subject key identifier: 77:14:BB:D2:93:E8:60:89:78:DF:30:F6:52:45:B9:4C:EC:4F:45:CC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B4550F91D2595D23348B20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8f7259c-f9fe-30f6-bb55-039b13987256.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 54788
IP address blocks: 204.101.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b4:55:0f:91:d2:59:5d:23:34:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=41ae5314-6e06-4524-9a9f-c517882d3460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:a2:0e:a3:45:09:47:22:76:a6:a7:4b:31:
b2:7d:5b:3b:e2:7d:40:09:69:04:2c:33:6b:de:d0:
9c:d3:ac:9a:7c:64:95:dd:f5:37:d9:1b:2a:8a:8f:
83:aa:33:f2:78:e5:38:20:5f:14:59:0e:71:6c:97:
4b:7b:3e:6b:c0:8f:0e:82:4b:d7:c5:ab:31:36:f9:
35:69:4a:33:f9:dd:b4:60:ba:21:92:03:57:29:83:
cc:90:90:96:25:f3:9c:cc:71:ea:ec:c0:2d:39:3d:
b9:ff:9b:94:22:19:af:c7:d9:43:53:e7:45:2a:bd:
5a:50:ea:b3:c7:58:c4:cf:f4:b4:f4:9f:86:20:04:
3c:cb:30:6f:03:9a:37:1a:4a:22:d4:3f:c9:23:ae:
b6:9a:75:b0:8b:7b:51:75:b6:18:96:be:f3:03:98:
c1:87:25:fe:3e:95:35:cd:57:91:1c:9a:f5:4c:64:
7c:30:99:bd:28:6e:87:fb:f5:c0:0a:33:e2:45:85:
2f:b7:5a:84:07:6a:33:f8:f7:12:cc:15:ce:e1:63:
40:5c:b3:ce:36:16:2f:b6:cd:0a:77:02:1d:3e:6f:
3c:ce:4b:f9:92:ab:24:6b:3e:97:db:ca:b3:11:be:
7e:a4:22:24:ba:e7:ab:e8:25:71:3f:bf:08:bb:43:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:14:BB:D2:93:E8:60:89:78:DF:30:F6:52:45:B9:4C:EC:4F:45:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8f7259c-f9fe-30f6-bb55-039b13987256.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:2a:16:85:63:a4:34:8a:64:60:0f:5c:6a:aa:9c:98:89:26:
cc:47:60:b7:14:8c:0b:97:57:b0:9f:f9:19:3f:7b:b0:dd:b9:
6d:f6:ed:3a:f2:7e:15:a2:93:79:c7:2c:ec:48:25:7c:cf:f4:
d4:7d:2a:89:6a:91:97:92:8a:fc:3e:59:d3:42:b0:86:cf:33:
b6:de:29:f1:fa:c2:5d:c3:cc:43:3f:05:56:19:b4:e8:65:58:
7b:e5:bf:08:37:3a:ca:46:28:27:af:8c:99:68:f7:3b:a1:19:
57:fb:1b:fb:25:d9:ed:a9:c1:8a:c1:47:9d:2f:25:e3:75:ae:
31:2d:ff:71:b6:73:09:fd:e3:39:64:92:a6:ec:9a:e8:e9:68:
4b:c1:64:9f:5b:be:48:b9:dc:42:8e:06:25:d3:bd:f8:62:4a:
9c:b8:66:d1:56:d2:a0:48:31:fb:33:da:da:7a:6f:f6:90:43:
fb:f8:8f:64:c8:f3:3b:ed:de:e2:87:a0:d3:62:c4:fe:a0:90:
12:b0:8f:2b:92:36:42:31:0b:c5:84:c7:04:8e:ec:03:c4:7a:
2e:c3:81:10:ad:c8:40:7d:89:91:5a:33:93:9c:1a:bb:b4:ab:
10:87:ee:66:7e:2f:6a:63:b8:11:a6:bf:9c:d6:0b:3a:cd:70:
26:df:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:46:25 2025 by rpki-client