Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8f2492f-fcaa-345b-ad90-d15c51d9f08e.roa
File: c8f2492f-fcaa-345b-ad90-d15c51d9f08e.roa (raw, json)
Hash identifier: aieaYzCOmR3VjYyIUbGn5K5bc89MHU5uZs0r1UgGGpU=
Subject key identifier: F6:31:F7:B5:2F:DA:27:77:8F:38:27:29:C7:97:48:D4:18:7E:37:0A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213465BE2DA27F8011C62100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8f2492f-fcaa-345b-ad90-d15c51d9f08e.roa
Signing time: Sun 09 Mar 2025 10:21:04 +0000
ROA not before: Sun 09 Mar 2025 10:21:04 +0000
ROA not after: Sat 07 Jun 2025 10:21:04 +0000
asID: 4540
IP address blocks: 209.226.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:65:be:2d:a2:7f:80:11:c6:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:04 2025 GMT
Not After : Jun 7 10:21:04 2025 GMT
Subject: CN=9bf1e015-412b-4c63-b645-dee74a43f9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:27:b7:c7:26:51:55:40:ac:3f:12:32:ce:
6d:04:1a:91:e7:62:d8:60:62:35:c3:e7:2f:1d:ea:
09:90:8f:56:d9:c3:27:e0:3a:b7:1c:f1:fa:90:b3:
b7:c8:0b:9d:3e:f1:67:10:88:20:7d:1a:05:2a:85:
da:45:c8:ca:ca:61:34:67:80:71:6e:dc:83:9e:54:
eb:69:32:e9:0a:dd:be:86:cd:2c:91:07:08:65:7d:
83:89:dd:48:87:79:96:3b:a5:02:0a:47:d2:ef:f5:
0b:e7:ca:5a:9b:69:b3:5a:9f:ac:50:2b:8f:f7:3f:
25:f3:02:99:bb:d8:e1:ef:aa:d6:93:a0:11:9a:17:
d4:2d:2a:d6:a1:cc:f6:d9:c3:f0:05:ef:89:4f:98:
97:19:db:0c:95:43:38:0d:4e:7e:6b:cc:e9:b7:18:
99:36:dc:6e:6e:bd:d8:29:6c:12:c7:8b:3e:4b:f9:
3a:69:55:ef:84:80:2b:ef:69:13:58:2f:b9:63:79:
86:87:45:17:91:9c:1a:ef:e0:8c:57:18:88:95:ba:
37:79:c7:02:ff:21:68:3a:e6:63:c5:7a:cb:e9:a3:
98:fd:74:fb:7d:13:07:0e:52:fe:6a:7f:34:30:62:
5d:f8:90:f5:9d:e0:68:3d:3d:52:b0:08:1c:56:cf:
40:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:F7:B5:2F:DA:27:77:8F:38:27:29:C7:97:48:D4:18:7E:37:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8f2492f-fcaa-345b-ad90-d15c51d9f08e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:f1:cf:10:fc:91:09:43:e7:58:3e:22:19:dd:a3:53:08:02:
96:26:3c:2c:95:89:8c:d2:80:83:9f:ec:e4:cd:e8:94:29:cc:
85:ca:8b:a6:ee:c0:f0:b7:9e:19:15:ea:91:22:4b:8e:b5:cd:
5f:e8:1e:40:8b:d1:1e:0b:59:12:44:e0:6b:71:4b:fb:8b:42:
3d:ee:d5:f0:c6:4c:73:6c:93:9a:e0:06:ba:09:0c:b8:7b:70:
b1:45:37:d9:0d:f9:60:df:7d:85:a2:2b:1a:48:e2:9b:22:b4:
f7:16:de:c1:d7:d7:f8:67:e6:d2:6a:08:3c:33:53:ef:b2:3e:
73:41:d0:8e:04:54:2f:02:56:7c:7d:31:c3:00:5a:22:26:ba:
e1:8a:eb:77:c6:72:81:7b:3b:ad:eb:2d:81:db:9e:34:08:82:
58:fb:94:7c:ea:bc:2b:0a:3d:c5:7a:b5:8b:07:02:0e:41:ba:
dd:3b:93:b0:44:7b:a1:06:ae:a2:be:fd:1c:c5:05:f3:af:51:
e2:f0:a4:f3:74:e3:81:75:27:ef:34:da:f7:b7:28:0e:e9:2c:
9f:f4:b9:85:0d:0c:b4:63:01:4e:1d:30:d1:9e:88:77:98:b3:
c5:c1:75:2a:3c:14:9e:b1:89:41:ae:58:08:2f:31:76:59:4d:
d6:7f:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:25 2025 by rpki-client