Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8448105-b3c6-3dca-a70f-30d333d58b7c.roa
File: c8448105-b3c6-3dca-a70f-30d333d58b7c.roa (raw, json)
Hash identifier: TYBa2doQsY6pDUbTd+agOTd3y1XoUKGkVJV4d/T1KQY=
Subject key identifier: 54:5B:9D:F0:29:A3:3B:78:CC:DA:16:65:A4:F9:24:12:14:07:4E:B3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134285BBF38FE269B7E1E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8448105-b3c6-3dca-a70f-30d333d58b7c.roa
Signing time: Sun 09 Mar 2025 10:20:35 +0000
ROA not before: Sun 09 Mar 2025 10:20:35 +0000
ROA not after: Sat 07 Jun 2025 10:20:35 +0000
asID: 577
IP address blocks: 67.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:28:5b:bf:38:fe:26:9b:7e:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:35 2025 GMT
Not After : Jun 7 10:20:35 2025 GMT
Subject: CN=59cde671-019b-4dda-9852-11256036e482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b6:12:76:01:be:21:d9:a0:a0:a8:56:98:91:
bd:0a:03:ae:5e:0c:88:1f:21:6e:be:2c:a4:ae:2f:
db:a4:b3:0a:eb:4f:20:6e:96:b8:7f:3b:0d:d4:fd:
5b:e3:c8:64:d1:55:0b:c1:71:12:47:44:80:ee:9e:
d0:63:c4:e2:03:e7:48:3f:ea:50:41:1f:55:eb:90:
d1:4f:e7:fe:02:2d:f5:4a:eb:6d:f6:23:da:06:89:
d2:ac:96:af:29:27:a0:4e:68:2f:23:fd:c5:54:be:
1b:0d:9a:6a:cf:fe:94:b0:0f:6d:4e:73:2b:12:69:
42:d7:26:1a:09:d3:12:64:c2:b2:89:35:08:72:1d:
48:b0:40:6a:ff:ca:e9:d0:34:bf:ca:21:53:b2:5c:
76:97:71:ed:06:3f:ae:4c:d0:2e:53:be:fa:f7:8e:
a0:fb:5b:da:f2:bc:5a:08:65:87:21:df:c2:04:c3:
f5:cc:01:e6:cd:9a:42:6c:f0:a3:a2:2a:9c:a3:b4:
ef:f7:f2:f0:96:c5:67:ed:0c:11:fc:9b:15:ab:83:
e8:90:73:f9:76:01:c7:6b:f7:b7:8c:4b:0b:fd:99:
28:6b:6f:f7:97:55:3f:01:08:51:f2:92:1f:a6:7b:
2b:7b:08:d8:a6:f4:78:ec:53:0c:e3:27:8a:11:25:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5B:9D:F0:29:A3:3B:78:CC:DA:16:65:A4:F9:24:12:14:07:4E:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8448105-b3c6-3dca-a70f-30d333d58b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:2f:15:0c:79:dc:74:0e:fb:74:64:9a:e4:f1:7f:0e:e6:a0:
48:e0:8b:41:7f:6c:32:5e:36:e9:2d:76:1b:19:60:54:a3:ca:
7f:72:7e:bd:03:b2:ce:a1:c8:61:ed:0a:c2:d7:78:c0:af:da:
78:3c:d2:cb:b9:ae:b2:31:60:a9:4c:d0:a8:ac:1d:a7:6e:6c:
00:b1:40:aa:1a:71:32:70:6c:75:7d:64:92:95:a5:11:26:28:
a1:d3:44:c8:0f:26:01:86:fb:d7:bc:b0:eb:0c:e2:ec:74:a4:
c8:cd:76:94:0c:57:90:c7:c4:a7:8d:15:e4:e2:8d:87:67:eb:
df:62:70:ff:dd:de:0e:22:1d:db:7a:cb:e5:60:d8:4b:73:61:
a8:d6:8e:60:d2:80:ac:ca:31:f8:a3:20:2c:ea:c8:70:e2:eb:
6b:31:92:a0:16:84:b1:32:51:cd:87:e6:e1:a9:e2:6a:1c:2c:
96:ea:57:a7:87:49:5e:13:b0:5d:e2:f6:23:b7:80:2c:f5:20:
ee:2a:93:bf:06:18:fc:f7:ed:28:0d:9a:19:28:07:2f:42:fb:
24:df:b8:5a:74:2b:a0:2b:30:c1:09:4e:ef:c2:ff:e8:a2:4d:
e7:c7:f8:93:02:c8:97:22:e7:f7:bc:6b:bd:63:e5:17:9d:ac:
ac:27:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:34 2025 by rpki-client