Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d29f3899-6ff2-3a2a-b5f7-2e0e90dfd1dc.roa
File: d29f3899-6ff2-3a2a-b5f7-2e0e90dfd1dc.roa (raw, json)
Hash identifier: QbTblD3xBFc6mmtf8pPPZd33qqs1OSLdpnluvjPW8fE=
Subject key identifier: 52:0C:F7:C1:86:87:81:EF:B1:A2:97:BC:67:C6:3E:D5:7D:7A:9F:25
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213462275494FED7B06BE000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d29f3899-6ff2-3a2a-b5f7-2e0e90dfd1dc.roa
Signing time: Sun 09 Mar 2025 10:21:03 +0000
ROA not before: Sun 09 Mar 2025 10:21:03 +0000
ROA not after: Sat 07 Jun 2025 10:21:03 +0000
asID: 7122
IP address blocks: 209.202.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:62:27:54:94:fe:d7:b0:6b:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:03 2025 GMT
Not After : Jun 7 10:21:03 2025 GMT
Subject: CN=a9cf55eb-b846-43e4-9a28-3848d1ecfa49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:f3:e5:66:7f:4c:9f:50:ea:97:5f:b0:a3:
80:7b:ae:71:4d:48:bf:95:c0:03:59:6e:fa:d1:05:
34:51:f3:91:aa:44:39:8e:6a:78:37:a0:76:9b:bd:
f0:e3:ec:83:e2:c2:2e:63:77:35:9e:11:f7:fe:81:
75:ed:da:06:d1:a6:39:e9:be:e7:35:5b:24:4f:a6:
47:a0:88:66:43:57:73:c0:5b:ce:aa:87:06:51:1b:
34:e3:32:fe:56:6e:d5:2c:46:44:6b:42:6a:19:6b:
da:8e:9a:82:e1:61:63:a8:29:bc:dc:b1:22:78:8c:
a2:a9:62:68:b6:a6:36:dd:22:65:c7:aa:c2:bd:d9:
1c:22:3c:b7:be:8f:9b:cd:2f:20:e8:66:79:2c:c1:
12:d3:cb:d9:57:e6:32:87:a6:ca:f1:6a:5d:33:61:
ef:ae:5c:18:9c:10:fa:aa:fa:fb:fd:45:fd:34:0b:
4a:9f:10:a2:bb:c5:c3:ac:82:2a:11:5f:0a:bc:c8:
0e:8e:f0:fd:66:d1:3d:13:45:fb:c0:04:c3:88:47:
ba:cf:6f:39:96:ca:7a:00:e1:c5:d4:52:5c:eb:d5:
6e:cf:c9:dc:f9:1c:c3:be:93:98:ee:fd:e1:bf:a2:
2c:db:a5:a7:df:46:98:d8:0e:96:2a:19:2e:ee:09:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0C:F7:C1:86:87:81:EF:B1:A2:97:BC:67:C6:3E:D5:7D:7A:9F:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d29f3899-6ff2-3a2a-b5f7-2e0e90dfd1dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.202.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d6:cc:15:23:fc:62:87:a8:89:a2:12:01:f0:d3:27:a1:86:
d4:93:c7:6f:3d:60:17:b8:f3:d5:d8:12:db:f5:d7:1c:af:51:
f8:56:c6:02:0e:4b:2a:50:2c:28:3c:6e:c7:49:58:6b:55:7d:
68:b5:cc:b6:4b:96:e6:a6:e0:a4:2c:08:8d:e9:06:21:9b:dc:
74:c0:f3:dc:59:d3:34:aa:3c:03:e7:6d:13:85:40:81:5b:47:
42:30:08:3b:19:e7:a3:e7:d3:0a:14:1e:11:db:0b:a5:c4:1d:
44:b2:7a:8c:3c:97:b6:c3:c2:ad:34:4c:d5:f7:19:4e:87:08:
be:1f:a6:43:76:12:fa:c9:3c:52:78:4b:e7:51:0c:32:75:2b:
f0:45:58:fc:c3:2c:43:57:05:26:c9:10:b6:41:8e:b0:75:c5:
39:ca:1b:74:b1:fa:09:c0:a4:01:12:d8:fa:9a:f6:e5:52:bf:
20:e5:5b:ef:c3:0d:ac:32:c9:88:c9:3e:50:1a:0d:c4:18:2d:
4d:a4:eb:7e:4c:bb:5a:6e:94:bc:6c:f5:7f:fa:92:2a:53:50:
b4:da:f5:98:98:83:b9:1e:c4:f0:63:04:51:d1:e4:3d:70:10:
5e:0a:40:5b:8c:d0:3f:1a:0c:d8:20:6a:ce:33:eb:5b:ee:d4:
80:93:37:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:51:03 2025 by rpki-client