Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3b50e4f-dc2d-3e88-9e59-68f38c5e48ea.roa
File: d3b50e4f-dc2d-3e88-9e59-68f38c5e48ea.roa (raw, json)
Hash identifier: ZzgvjM85z/4slABHXSgKEpVD0ocwtCU2uQ/244haM3w=
Subject key identifier: CC:C2:BA:33:7B:68:E7:B4:FA:06:6C:38:BD:6B:22:7D:68:A1:63:80
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921346639C6320CEAA64396C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3b50e4f-dc2d-3e88-9e59-68f38c5e48ea.roa
Signing time: Sun 09 Mar 2025 10:21:05 +0000
ROA not before: Sun 09 Mar 2025 10:21:05 +0000
ROA not after: Sat 07 Jun 2025 10:21:05 +0000
asID: 30336
IP address blocks: 209.226.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:66:39:c6:32:0c:ea:a6:43:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:05 2025 GMT
Not After : Jun 7 10:21:05 2025 GMT
Subject: CN=05e2e1a9-e2f3-4b81-ba02-0261976f6a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:41:5b:bd:a7:7a:aa:50:43:3f:67:9b:c4:d3:
29:27:80:63:78:f8:64:d3:86:fc:74:9b:0c:98:0e:
e7:8e:9a:b7:b4:d1:d1:ea:25:7b:11:0f:a0:57:fd:
31:ec:c3:06:ca:98:43:fe:e6:75:28:cb:3c:33:e1:
77:46:72:34:81:9a:0e:e6:67:0c:2d:3b:3d:29:c0:
a4:b5:42:e1:8e:b8:22:13:e2:3b:b8:1d:22:18:15:
ec:c0:59:75:b7:18:50:6c:32:26:e6:9b:55:25:28:
80:23:eb:e6:23:f1:c4:30:46:cb:73:a4:e2:02:74:
43:63:50:d4:46:58:56:c2:a2:ae:8c:91:bf:1a:5e:
52:e4:cc:36:32:6d:38:74:b1:ae:ef:06:d2:2c:eb:
9d:3b:80:f4:d1:c1:a7:cc:5e:82:30:3e:60:a0:55:
e7:32:f8:14:cf:b5:0a:b4:9a:c9:97:79:9a:d5:73:
32:5b:6e:ac:35:30:8e:70:58:cf:9d:44:aa:ec:d0:
3a:1d:26:58:73:8e:37:a7:8f:6b:7a:d6:49:af:56:
52:b6:85:6e:7e:ec:26:67:53:17:31:3b:5e:96:70:
2e:3e:cb:68:59:4b:cd:59:54:a1:16:cb:49:2e:e4:
d2:c3:98:0a:0d:18:d0:15:2d:2c:eb:2b:c9:7e:d6:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C2:BA:33:7B:68:E7:B4:FA:06:6C:38:BD:6B:22:7D:68:A1:63:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3b50e4f-dc2d-3e88-9e59-68f38c5e48ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:62:33:4c:47:d1:69:5b:5f:f1:c2:af:66:0c:8f:a5:8b:9b:
a8:3c:45:6e:a2:9a:d7:27:f5:83:98:ca:e2:66:37:65:fc:f2:
ff:3e:05:d8:76:f2:d3:d9:46:19:6e:3e:f0:1c:89:ab:41:0f:
c4:20:ee:4b:03:78:bc:3c:81:b1:da:79:fe:c8:88:a3:6f:a0:
1a:70:37:33:c2:81:86:06:5b:81:dc:96:b8:96:8f:ed:25:1f:
ef:7f:57:a0:d2:db:0f:4c:2c:c2:40:96:f9:c3:18:29:f7:28:
c2:8d:15:a5:ba:99:b9:47:c3:f7:0c:bd:ee:a9:89:6b:12:72:
b0:00:02:83:cf:c2:a4:65:91:de:24:e1:81:47:ff:8a:73:7a:
63:e4:2d:98:0a:f1:ac:11:eb:b1:b5:80:8b:0f:a1:58:55:83:
1a:cb:6b:fe:bd:cb:64:82:51:95:7d:80:c7:37:32:cb:a3:3e:
db:b9:5c:24:95:ec:0c:ba:32:54:98:0d:76:05:38:4a:96:dc:
13:d4:72:12:05:db:db:d7:9d:1d:31:21:41:a8:d4:d9:3f:e4:
15:63:34:de:38:3e:37:f1:09:a1:a9:75:4a:56:9e:cd:c4:67:
6a:73:7c:a5:71:dc:a6:c9:55:a8:90:3e:ed:42:a2:0f:07:a4:
c6:45:ac:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:44 2025 by rpki-client