Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbfc2311-9ad5-3a59-b491-64fdbc327b86.roa
File: cbfc2311-9ad5-3a59-b491-64fdbc327b86.roa (raw, json)
Hash identifier: c89veSSJ6aCS2NwhuwwcbhjZayaF1X3069uiFtaAp5A=
Subject key identifier: F3:FE:D7:6C:4B:4B:F8:7B:9F:D0:A1:B9:95:C0:7D:C7:56:BA:70:79
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D290393EB7E40CE84FD5580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbfc2311-9ad5-3a59-b491-64fdbc327b86.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 855
IP address blocks: 134.41.0.0/16 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:03:93:eb:7e:40:ce:84:fd:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=8d7dfa9c-328b-4bb9-b249-509693f4f645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f9:29:68:61:16:b4:ca:f3:a8:b6:33:cb:3d:
f7:5d:65:ba:a8:5d:52:3e:6f:fb:6e:73:00:aa:84:
38:8f:67:96:1b:90:1a:94:6c:b2:7e:bd:bd:dc:ae:
5a:4d:9a:25:37:41:86:9b:ff:88:0c:d5:38:a8:2c:
7e:a3:59:c3:a8:ac:c8:0a:47:72:5d:02:3d:ca:9a:
16:8b:ec:b2:91:b0:a8:4f:fa:22:8c:14:9d:16:2f:
c7:65:ce:91:77:c2:1f:22:78:2b:51:90:8f:5b:e1:
89:81:8d:a6:50:27:ed:5d:e0:51:ef:08:b3:2f:95:
b6:95:5f:bd:52:50:1a:6f:14:5c:66:fe:3d:b6:76:
26:25:28:38:d7:c5:cb:da:22:01:ce:2e:65:30:08:
fe:ec:cb:de:6b:5f:74:3e:7b:00:08:8d:5d:f2:06:
99:c0:d4:02:e6:25:cf:b5:8d:6c:00:00:c0:88:ca:
a6:0d:84:10:00:a3:be:a1:6a:c4:e2:50:75:6f:17:
3d:fd:78:43:69:b8:73:96:51:fb:8c:07:72:75:33:
d4:ee:7a:5c:ce:6f:d1:65:e6:c2:c1:0c:19:cb:40:
74:47:2e:b2:2f:5a:1c:1e:f1:42:52:2a:98:c9:c6:
3a:0e:c7:64:57:09:2f:85:ff:c4:6c:1e:93:c0:ea:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FE:D7:6C:4B:4B:F8:7B:9F:D0:A1:B9:95:C0:7D:C7:56:BA:70:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbfc2311-9ad5-3a59-b491-64fdbc327b86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
134.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:eb:26:65:41:19:59:75:1e:72:bc:8c:31:4b:a5:c6:7a:81:
35:89:cc:34:6b:36:e2:31:80:5a:96:f3:5a:70:29:8f:4e:9a:
9a:e3:85:27:14:1d:11:26:54:fb:0b:58:13:0a:22:99:cd:6d:
67:98:47:24:49:36:36:67:26:a1:bb:bf:83:71:e4:33:07:0f:
7b:40:07:52:1f:f3:d3:08:02:f7:3a:c1:90:98:b7:9c:6a:03:
28:00:99:da:c5:d8:a8:1f:2e:45:f8:e0:c3:f6:da:ea:1a:bc:
7e:7d:04:a1:74:ec:ad:17:9d:c5:4a:dd:ef:ab:dc:05:56:49:
df:3a:f9:20:25:1a:0f:d6:c0:38:37:8d:6e:16:db:0c:23:1d:
79:58:86:6c:70:41:db:11:a4:08:b3:a9:19:20:97:db:e5:bc:
f0:73:bb:e2:b1:30:b1:f6:59:7f:8a:7b:d9:40:71:06:ae:1d:
0f:5d:3a:fc:19:57:ff:da:30:d2:10:d9:c9:47:6d:eb:67:ed:
5e:d9:f9:d8:36:99:cd:48:d7:a0:ee:cb:4d:14:19:c7:7e:1a:
d3:d9:2c:f8:46:75:fe:6a:2b:0f:2b:f9:8f:fc:49:00:40:bb:
9e:a1:62:91:51:be:db:83:c4:9e:b2:33:84:2d:73:a5:d0:0e:
02:a5:37:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:38 2025 by rpki-client