Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d0a7824b-ffa7-351e-8322-4547c33425aa.roa
File: d0a7824b-ffa7-351e-8322-4547c33425aa.roa (raw, json)
Hash identifier: MNW3XoIA/ClpDC9bXCYDOOPlGz2gwZtsfUzmRrBIxww=
Subject key identifier: 68:3E:F8:0E:5E:EC:F5:DE:77:C0:AF:0B:45:68:48:93:95:B9:C1:7F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343D73A469254429269B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d0a7824b-ffa7-351e-8322-4547c33425aa.roa
Signing time: Sun 09 Mar 2025 10:20:45 +0000
ROA not before: Sun 09 Mar 2025 10:20:45 +0000
ROA not after: Sat 07 Jun 2025 10:20:45 +0000
asID: 21724
IP address blocks: 204.101.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:3d:73:a4:69:25:44:29:26:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:45 2025 GMT
Not After : Jun 7 10:20:45 2025 GMT
Subject: CN=ca03abac-a774-40cc-875d-19aeab8d139f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:b8:5b:89:fb:7c:d1:22:0f:77:33:b3:72:
c2:43:46:4b:c9:e2:de:8d:34:f7:b8:ee:2c:38:ac:
59:b2:c3:71:9f:dc:59:70:0d:a7:0c:a7:c4:e3:f1:
31:fb:01:2a:d4:af:36:8c:3e:d2:a2:a6:f9:ef:03:
58:de:9a:56:03:b1:1e:8e:8a:e8:02:45:6a:e2:f5:
08:3c:80:40:4c:eb:9a:9d:ea:45:e9:17:b7:cf:88:
5a:48:05:f8:61:3f:60:20:8f:69:d7:f6:8d:33:9b:
5d:98:90:91:e9:12:39:55:ad:9f:93:d8:da:4e:52:
36:f3:fa:1d:11:d1:f9:2c:e2:7c:74:62:d5:70:37:
4b:68:a9:99:1f:39:16:ad:e5:f8:e0:39:f5:a9:0e:
3e:a6:10:c9:1c:3c:71:97:ed:05:d2:bc:c0:1b:c9:
12:a4:87:e8:4e:64:fa:e1:5c:f2:bf:38:68:1a:8f:
64:48:7a:79:a4:3d:57:54:b5:94:b2:ae:22:8c:b5:
a7:cc:74:bf:ce:24:b3:1c:01:75:c9:71:cc:a5:25:
20:45:f8:a5:c1:30:8a:c5:13:06:37:5a:eb:5b:35:
51:4d:5f:49:49:c7:ce:a6:fe:0f:aa:56:33:55:ba:
02:42:c0:e8:13:c2:41:69:2d:75:ce:e6:e9:07:47:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3E:F8:0E:5E:EC:F5:DE:77:C0:AF:0B:45:68:48:93:95:B9:C1:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d0a7824b-ffa7-351e-8322-4547c33425aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:de:b9:87:f1:cd:f8:7f:dd:e8:06:fc:97:7c:b9:7e:67:5d:
dd:5c:a8:65:02:b1:a6:0a:53:6e:c6:56:9b:fd:a1:65:66:e2:
c4:09:04:54:6d:d7:c3:8c:94:e5:a2:d4:38:74:b5:0f:dd:cb:
c9:5c:75:e1:e4:35:a7:9a:fd:c1:73:a3:82:0d:68:f4:4d:52:
bf:6b:8d:2e:70:f7:c6:ea:87:6b:ce:7a:b2:21:25:57:73:ae:
68:ec:bf:f3:29:a4:e8:3c:91:be:58:be:3d:91:a3:a6:31:cc:
8d:80:b6:91:33:9d:83:af:03:da:55:97:2a:55:78:4c:38:db:
72:80:50:52:7e:2b:e2:cd:06:a3:94:f6:93:5a:44:fb:40:da:
f4:85:a9:81:a9:1b:89:f1:5b:e2:0d:80:93:fa:0d:0f:e9:39:
dc:ae:e0:91:10:55:b4:4b:9a:a0:c2:35:4b:f0:85:09:11:72:
16:15:cd:c2:33:87:0a:21:f9:34:9f:e8:3f:47:cd:e8:31:8c:
4a:dd:31:4f:9f:fd:cc:ba:e2:c0:e6:f9:ae:2c:a8:ee:f4:27:
12:89:bf:a9:8a:24:04:28:3f:ab:9c:f5:d7:2e:7d:2f:56:69:
3d:41:2c:c4:b6:95:1c:fe:79:01:f6:8a:38:45:65:56:5d:8a:
c0:6f:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:19 2025 by rpki-client