Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d0427d8d-8ddc-31d1-9904-96bed6dfe369.roa
File: d0427d8d-8ddc-31d1-9904-96bed6dfe369.roa (raw, json)
Hash identifier: nnF39+ujGCFz7FXYYMDbzyulJXCY9l4g+qOGmiPLUdE=
Subject key identifier: CA:69:5D:95:CB:D2:1E:F0:C8:4C:89:C1:1A:A1:61:F4:65:11:29:23
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343E7EE2006681A5212580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d0427d8d-8ddc-31d1-9904-96bed6dfe369.roa
Signing time: Sun 09 Mar 2025 10:20:46 +0000
ROA not before: Sun 09 Mar 2025 10:20:46 +0000
ROA not after: Sat 07 Jun 2025 10:20:46 +0000
asID: 33017
IP address blocks: 204.101.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:3e:7e:e2:00:66:81:a5:21:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:46 2025 GMT
Not After : Jun 7 10:20:46 2025 GMT
Subject: CN=f45dc0c9-c519-4b94-abb7-35975d56de2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:53:00:0f:b1:14:58:f4:01:16:fe:71:6d:
69:d4:25:6f:8b:5d:08:86:a9:a7:39:21:f2:80:0a:
3a:52:22:d3:e0:7e:d3:60:bb:dc:ce:32:b1:c2:f7:
ed:e4:af:19:cf:7c:10:fa:de:a0:d4:dc:7e:f5:9d:
50:02:e7:18:38:aa:05:12:7a:1f:15:65:82:e9:fa:
3f:30:27:5e:a2:fd:99:a1:e3:af:b1:54:93:0b:24:
22:82:35:89:ae:16:0a:06:05:bc:0b:c5:b9:36:50:
24:11:26:87:a4:af:bb:2e:55:d4:01:c7:d7:9d:60:
af:81:c2:c2:06:61:dc:fa:72:4b:84:53:ec:22:02:
95:d2:32:d6:49:d5:19:8b:42:4c:88:10:20:9b:7c:
f2:8c:85:a2:20:d4:0c:79:57:e7:13:23:1d:d6:89:
d7:b6:c8:cb:75:9a:74:a5:e8:4e:52:d5:d1:0a:2b:
1d:35:ec:f9:27:26:23:6a:0b:49:d7:88:d5:10:6e:
bf:af:e3:91:4b:f2:2c:7a:8c:70:27:54:76:cc:6a:
89:8b:93:cc:92:47:6b:fd:b1:c7:23:27:31:ea:0f:
70:60:42:67:5f:5d:f6:ac:78:9b:38:3a:01:59:72:
a5:a3:c1:69:52:6c:2b:75:f5:7d:00:bc:38:30:9b:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:69:5D:95:CB:D2:1E:F0:C8:4C:89:C1:1A:A1:61:F4:65:11:29:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d0427d8d-8ddc-31d1-9904-96bed6dfe369.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:3e:c1:d2:1e:6d:16:50:64:46:a7:21:fb:5c:75:1f:77:24:
3d:20:4c:bc:da:a7:81:ba:d8:f5:a5:b1:cd:24:76:4b:98:ec:
f3:e3:42:ba:79:d3:90:86:6b:81:d9:a2:b0:41:24:e6:98:a0:
d0:46:d1:c6:d0:6e:ae:10:fc:21:5e:c5:29:74:74:0a:c9:17:
f9:a6:c3:23:5b:7b:b9:9c:97:38:cb:80:fa:e3:47:18:9b:44:
bb:bc:3b:a1:2d:5e:e5:4a:ec:b5:45:72:1a:2c:60:5e:1d:99:
eb:0d:73:c0:1f:94:82:82:a0:59:9a:f2:cd:45:68:01:ce:44:
0b:39:8f:53:1c:d9:d4:c8:26:c8:fb:a5:a1:3f:87:05:75:fd:
12:b1:81:7e:d2:98:11:6e:87:85:d7:ec:f4:de:6e:35:c5:3d:
6a:7d:63:d1:6a:14:1a:42:4c:60:58:ef:ad:89:71:ee:5c:18:
69:1d:2a:b5:fd:03:ec:16:57:1d:5e:46:ed:19:bd:eb:5b:8a:
ab:41:a0:a6:a4:f6:22:2e:99:af:27:44:8b:68:21:34:88:f6:
81:54:89:75:2f:09:88:4e:29:85:32:8b:3a:f0:cf:73:45:95:
0e:dc:03:37:65:cc:a6:fb:c7:df:fa:38:1d:4a:e8:37:0d:81:
77:66:fc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:29 2025 by rpki-client