Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be936f80-0aec-338c-911e-09bba6644f0b.roa
File: be936f80-0aec-338c-911e-09bba6644f0b.roa (raw, json)
Hash identifier: 8mBdWDZp5UonqeKacJyO91kVO+CT9/hPmrVL9GpTJgc=
Subject key identifier: 85:A0:CB:94:E5:CD:07:45:1E:AB:5A:D3:BE:1E:61:9E:A1:FC:32:F5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213465FB67B89F4EB08306FC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be936f80-0aec-338c-911e-09bba6644f0b.roa
Signing time: Sun 09 Mar 2025 10:21:05 +0000
ROA not before: Sun 09 Mar 2025 10:21:05 +0000
ROA not after: Sat 07 Jun 2025 10:21:05 +0000
asID: 35911
IP address blocks: 209.226.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:65:fb:67:b8:9f:4e:b0:83:06:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:05 2025 GMT
Not After : Jun 7 10:21:05 2025 GMT
Subject: CN=5b14826d-aeca-4907-916e-28b0c3e08057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:12:a1:01:22:0a:0e:13:af:cf:2a:58:4f:
91:d0:2e:75:22:3f:eb:70:35:b2:e4:06:fd:fe:b4:
db:c1:10:32:35:f1:91:d8:9e:d3:80:3a:d0:f8:d7:
5e:03:a3:08:4d:2c:99:e0:b5:d4:52:22:ea:50:be:
60:83:05:9b:e8:d0:05:e9:8e:4d:b9:68:6e:4a:c8:
0f:c0:cf:67:ee:36:88:d1:9c:1c:5f:af:f1:91:32:
c4:0c:9d:79:4e:37:68:60:c6:21:1d:1e:01:85:8b:
ce:7c:91:51:00:9a:de:0b:4d:d0:c4:fe:06:0f:e0:
aa:3c:d6:c6:02:39:6b:6c:ef:47:05:00:59:a2:3d:
39:67:1f:25:88:d0:e8:90:ed:2c:42:0e:de:78:ed:
5f:2a:a3:e1:72:e5:34:cb:f6:5e:9a:cb:6d:ce:63:
a5:a1:c7:1b:4c:d8:73:42:d8:e5:01:a9:91:21:89:
82:89:60:49:79:7a:3c:17:e9:eb:15:47:95:d7:bb:
c6:00:13:68:93:d2:9f:a8:55:f6:40:88:78:e8:8d:
5b:69:e7:4c:70:14:32:22:26:9a:6b:54:c2:dc:10:
61:50:c2:9e:c8:17:0d:2b:cb:d9:9a:58:21:b6:c0:
26:3b:42:ef:1b:87:c1:45:51:43:0b:ec:6c:d0:92:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A0:CB:94:E5:CD:07:45:1E:AB:5A:D3:BE:1E:61:9E:A1:FC:32:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be936f80-0aec-338c-911e-09bba6644f0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:b0:3b:e0:3b:ea:d2:19:f7:4a:28:45:9d:15:b6:77:5d:1b:
a2:a0:c3:3a:c9:dc:f6:69:d8:55:83:d4:92:7b:75:bf:26:dd:
ba:ea:2e:70:d5:fd:a0:7a:70:d9:db:a3:58:ca:27:e9:1d:f7:
b9:c2:41:6a:41:7d:ff:8d:ec:3a:8e:a5:27:49:a1:7f:50:f7:
ce:a3:c1:a3:79:22:a0:84:b4:11:7b:24:c7:be:fb:98:d2:9b:
7c:ef:91:6e:07:56:e8:34:b5:bd:7c:7e:73:01:30:66:d1:ab:
90:f5:56:30:6a:fc:60:48:aa:84:b1:9e:3c:27:91:08:96:68:
37:03:fa:f6:83:e0:20:9b:2c:f4:83:c3:23:b1:27:92:59:83:
34:9a:c0:f0:83:75:0c:dd:55:7c:5c:47:94:b3:09:2b:70:f8:
39:99:aa:a5:22:59:96:ce:a2:4c:95:b5:18:18:de:1d:50:ee:
26:71:38:26:4c:49:e3:bd:93:fa:2d:4b:8d:d4:5c:c0:51:6c:
1a:a0:98:cd:c1:ec:20:bf:1e:fe:0a:c8:ab:7b:16:b8:dc:f9:
0c:8e:9a:24:9d:66:8f:0f:13:62:53:31:54:84:04:d6:1a:6b:
74:d0:4f:86:f8:98:23:b8:e6:cd:8c:a7:d5:cf:59:99:e6:2b:
cc:76:1b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:41 2025 by rpki-client