Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb32cc3e-fc39-3cde-8d45-3fb009baf0c2.roa
File: cb32cc3e-fc39-3cde-8d45-3fb009baf0c2.roa (raw, json)
Hash identifier: oLTo0pZa6+zvFI+z+dCGIW8+fNXwoaq5RC3aO9vMnIg=
Subject key identifier: 68:EA:7A:B1:12:97:6B:7A:2C:E9:8A:53:45:EE:1B:1C:30:72:B6:E2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213445AE3EE3FC54268AE500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb32cc3e-fc39-3cde-8d45-3fb009baf0c2.roa
Signing time: Sun 09 Mar 2025 10:20:49 +0000
ROA not before: Sun 09 Mar 2025 10:20:49 +0000
ROA not after: Sat 07 Jun 2025 10:20:49 +0000
asID: 36522
IP address blocks: 204.101.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:45:ae:3e:e3:fc:54:26:8a:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:49 2025 GMT
Not After : Jun 7 10:20:49 2025 GMT
Subject: CN=5735ed32-9cba-4491-99d6-7c002c3ec634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:4e:2c:31:87:84:7f:51:4b:26:6f:a0:76:
9d:02:fd:ba:b0:b8:14:60:cf:4a:40:90:fe:19:43:
07:f4:f6:a1:95:0f:7a:86:97:ea:bb:0e:d2:17:dc:
1c:aa:76:1c:fe:ee:6d:25:4a:a7:43:19:0e:ca:ea:
9a:2a:a1:c7:2c:32:7d:40:65:3f:f9:02:ee:3b:4b:
1f:ba:4d:f6:87:6e:6b:99:f2:c0:ca:9c:34:60:30:
84:19:aa:74:5b:4d:c9:5d:f0:24:39:a0:fc:b5:af:
cd:86:ff:8f:75:32:ab:ef:48:ce:4e:be:65:6a:c7:
7f:6d:92:d6:93:e3:21:6d:24:7d:c3:06:11:0f:8d:
b7:09:e4:c8:7a:53:73:dd:fe:31:6f:c0:41:8e:85:
f6:0c:d0:c7:7d:8b:13:db:94:b8:0e:e1:dc:b1:54:
13:7a:f6:f8:ee:88:81:77:24:b5:43:1d:42:4b:60:
65:64:10:fb:4d:7d:95:d2:86:b8:39:f9:37:c4:43:
36:d4:c5:f5:77:cd:01:8b:f5:ef:12:50:03:1f:d4:
5c:54:88:3c:b5:77:a4:f1:fc:09:62:9e:e7:76:22:
05:17:d7:7a:16:a9:bd:f9:19:3e:19:f8:bd:39:04:
97:ba:2c:db:c1:69:fe:94:52:17:eb:16:55:0f:be:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EA:7A:B1:12:97:6B:7A:2C:E9:8A:53:45:EE:1B:1C:30:72:B6:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb32cc3e-fc39-3cde-8d45-3fb009baf0c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:3b:3f:cc:6a:1c:d2:46:c2:65:d1:a1:e3:a7:9e:4b:2d:20:
fb:bb:54:c3:e6:6b:fe:cb:3c:00:54:d1:de:78:84:b2:c1:a3:
35:05:14:1f:a6:ea:9b:c6:6a:ee:98:ed:0f:e6:56:a1:f0:66:
1b:5e:d4:7f:be:67:24:c3:55:e8:5e:9f:32:ec:17:39:0d:61:
58:9d:99:52:9b:e1:7f:16:bd:9f:77:1f:6d:58:d4:26:fa:f4:
21:bd:29:a6:0a:7f:0b:92:f5:3f:ab:a8:db:76:d8:24:23:be:
67:78:ea:04:d3:39:5c:47:08:b3:95:df:55:7a:24:54:84:58:
1f:61:c8:c0:c9:ae:19:c3:86:8f:05:0a:8c:17:a4:56:80:0d:
8e:73:c4:ce:56:8b:40:80:a4:3f:bc:9d:40:de:88:2a:8b:b4:
84:6a:00:a5:c0:be:ce:29:da:52:63:c0:c1:23:38:37:ed:a6:
20:5a:42:9b:5a:08:65:4d:8d:a5:8b:1f:be:22:f6:09:c0:01:
b4:f3:bc:62:42:12:d6:73:dd:52:41:10:6f:73:af:92:15:ae:
df:0a:4b:0f:d4:9a:21:c9:b5:2b:56:a7:54:a5:2a:8b:21:52:
e4:76:da:44:f1:17:45:f9:1d:d3:7b:e6:b9:28:74:36:f5:10:
a8:f4:08:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:33 2025 by rpki-client