Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ce5eb58b-0075-3787-aefa-6dd1b8fed74e.roa
File: ce5eb58b-0075-3787-aefa-6dd1b8fed74e.roa (raw, json)
Hash identifier: 9cRbOB4NSJ9VZXK5qMrMj3LVrbnEMXBpGUf1GuqX/+Y=
Subject key identifier: 49:19:B4:C8:2E:D1:CE:D1:4C:47:B6:66:99:38:58:8C:D6:67:1D:39
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213445E58150DD50A58F4DC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ce5eb58b-0075-3787-aefa-6dd1b8fed74e.roa
Signing time: Sun 09 Mar 2025 10:20:49 +0000
ROA not before: Sun 09 Mar 2025 10:20:49 +0000
ROA not after: Sat 07 Jun 2025 10:20:49 +0000
asID: 7122
IP address blocks: 204.112.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:45:e5:81:50:dd:50:a5:8f:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:49 2025 GMT
Not After : Jun 7 10:20:49 2025 GMT
Subject: CN=7dddffc7-9ed5-4555-aefd-dd9ad98ed06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:2f:64:15:18:ab:d5:b8:11:75:1f:d2:45:
4a:9a:b7:05:61:94:e5:d5:d4:fd:59:55:e8:52:eb:
20:00:71:53:b6:49:19:bb:65:96:be:5b:be:13:d1:
fa:5f:40:ff:4c:a6:d2:27:2a:63:70:e1:f5:29:2a:
9d:bf:ce:ae:21:82:94:a5:c1:51:4a:a7:0c:12:1a:
cb:99:b4:d2:da:21:1c:94:d3:3c:45:e3:c8:43:25:
fc:05:84:2b:b5:5c:4f:e9:52:ed:be:e3:50:c1:64:
52:eb:68:2e:93:51:93:c1:d8:a2:50:e3:5b:d7:65:
de:63:3b:81:50:b9:69:d4:d1:fc:1a:70:d3:39:91:
e1:cb:af:1e:76:d6:a3:16:03:71:dd:48:1a:be:4a:
78:a3:c8:2e:51:cb:b7:27:2f:9c:2c:d5:8d:da:91:
96:b5:dd:69:b7:30:f1:c0:0c:11:0f:59:0c:5e:4a:
db:80:21:57:3b:bd:24:6a:52:39:99:3f:e8:1e:70:
49:57:59:61:49:56:37:32:0f:e6:4c:0a:ef:b8:cd:
36:55:5f:0d:41:75:39:cc:d6:4a:e0:ff:b8:b2:1e:
f5:aa:b8:db:2a:05:74:6e:d4:23:50:db:84:53:86:
49:1c:af:09:a7:d8:c4:ec:94:39:ed:a8:17:5f:2f:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:19:B4:C8:2E:D1:CE:D1:4C:47:B6:66:99:38:58:8C:D6:67:1D:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ce5eb58b-0075-3787-aefa-6dd1b8fed74e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.112.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:b7:2c:04:3b:91:d9:49:04:9f:03:b0:e9:a5:8b:a6:71:5f:
5c:6e:7a:5a:6c:50:2d:01:d5:e4:95:dd:bc:f3:0b:db:eb:be:
6a:8d:81:00:12:ff:c4:48:14:8e:b0:ca:ef:2a:bd:e2:45:3c:
fe:6a:23:66:31:c5:00:8d:41:57:84:ae:39:8d:40:21:1f:00:
1a:d6:25:0f:58:e6:b0:2b:7e:28:f2:8c:35:5d:59:9b:c5:40:
b4:22:35:35:ae:bf:1a:df:90:39:a4:14:c1:af:50:b7:59:b5:
2b:12:2e:36:56:bf:90:91:c9:34:70:b5:b4:4d:86:01:57:da:
a0:18:cb:1f:dd:66:90:34:1d:77:92:df:b7:d5:b8:57:4e:e3:
8c:82:a8:21:64:11:6b:ff:45:e8:53:31:c4:76:c3:5f:01:1c:
f6:0e:d0:74:2e:b5:2a:6a:72:2d:3b:44:f0:65:3c:26:44:a7:
dc:67:ab:4f:15:2d:53:e3:99:dc:fb:24:68:9c:08:0d:fe:ff:
8f:93:d7:a9:b6:c0:ec:83:63:d3:7d:13:e9:0e:a6:18:93:b5:
db:1a:77:9e:85:ab:89:48:66:e8:3f:8e:c9:57:e0:84:3e:db:
75:c8:ed:4d:85:e4:16:ce:68:2c:0c:8d:1a:64:95:45:bb:31:
30:9e:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:06 2025 by rpki-client