Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bfe3f58f-2956-37f2-8c34-bbf5ce8ddb20.roa
File: bfe3f58f-2956-37f2-8c34-bbf5ce8ddb20.roa (raw, json)
Hash identifier: uqYWzhIBsSmvN4SCRuRAvykA/qSaofDoLkzNZZ5pYNY=
Subject key identifier: E3:AF:97:03:6E:49:F0:BE:A1:8A:0A:14:5A:20:48:6A:8B:8E:DD:3A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29CE6182AD15C36CF37880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bfe3f58f-2956-37f2-8c34-bbf5ce8ddb20.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 21552
IP address blocks: 204.101.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:ce:61:82:ad:15:c3:6c:f3:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=5c6d350e-e8b9-471a-a624-bb080b27af66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:35:83:40:6a:37:a3:4f:dd:8a:3e:f7:a6:
e0:9b:fa:0e:53:85:a3:32:c2:0b:d9:1b:60:f6:ce:
03:11:cc:9c:ea:a8:00:b8:81:53:29:2f:26:38:8e:
9a:8b:73:9d:ae:08:d4:72:ae:fc:0c:b7:b1:f3:0a:
3c:85:83:38:36:d2:30:c1:8b:f1:48:e6:59:d6:9c:
af:c1:b8:ad:b1:57:16:35:f6:b6:2d:5f:92:d1:28:
38:22:3f:3d:06:67:0d:95:55:c4:55:35:47:ec:dd:
7e:42:e1:7f:13:5b:f6:b0:38:e7:1f:bc:f1:2c:8d:
c7:e3:a3:2c:1a:55:2e:e8:dc:94:a5:2d:cd:b7:99:
89:ee:b6:5e:92:af:66:0c:b9:08:87:78:04:b2:ca:
ef:90:11:cf:5e:6c:78:68:8a:23:0d:1e:a3:67:30:
90:80:c9:0c:64:56:ea:46:6f:83:91:c1:44:71:40:
31:eb:6b:fe:d0:96:39:ae:db:e9:3a:2d:85:95:28:
42:07:8c:88:31:b2:64:a1:aa:4c:e4:9f:4a:13:0d:
f5:bd:04:50:d4:8d:19:e9:61:1e:b8:0c:41:b1:c9:
c0:ca:17:83:9e:c8:03:c4:53:c6:b6:7c:1a:5a:81:
cc:29:e0:94:50:52:bd:29:79:94:26:fb:bd:77:20:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:97:03:6E:49:F0:BE:A1:8A:0A:14:5A:20:48:6A:8B:8E:DD:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bfe3f58f-2956-37f2-8c34-bbf5ce8ddb20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:fa:53:b0:72:d4:c7:34:d0:f8:27:7c:db:3c:c7:14:44:f3:
20:4f:e2:93:ab:d5:07:57:d5:77:7c:ac:d3:8f:4c:e0:ee:5c:
3a:af:d1:f0:ac:32:0d:65:08:0f:38:0e:a3:5f:c7:08:4e:3d:
6c:37:2e:1e:d3:85:0e:f3:06:8f:b1:73:d7:e2:1b:c6:68:5d:
26:4e:ca:f0:44:f5:57:e1:d3:d3:ab:3b:ef:cc:0d:d5:7d:61:
1d:c0:65:47:8b:94:83:f6:6b:2d:5d:b3:85:6c:26:28:e8:23:
dc:d6:51:12:e1:ea:ad:82:02:b7:e9:64:64:e2:4b:99:73:70:
0f:3e:bb:34:a5:47:37:65:e0:8c:25:a4:03:63:f0:6c:fe:21:
64:33:ed:ab:72:6a:c6:dd:c6:0d:cc:0d:b8:79:bf:15:f3:7e:
16:07:7a:d7:b3:31:bb:ed:b2:ac:80:6b:64:e6:c8:0b:a9:c5:
db:f7:af:13:e3:5c:3a:70:40:ae:21:ba:b7:5e:99:13:9d:5d:
a8:55:71:a7:27:bf:14:32:e9:9f:6a:3d:17:ec:46:b2:44:2f:
52:57:3b:07:e0:02:00:45:ad:62:70:ea:52:4d:6b:34:be:98:
0d:ff:61:ca:ce:f6:66:2a:55:43:1e:7b:c8:47:ec:30:43:9f:
24:a3:21:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:24 2025 by rpki-client