Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4a5bbc4-ae63-3995-b027-4f992ec73f30.roa
File: d4a5bbc4-ae63-3995-b027-4f992ec73f30.roa (raw, json)
Hash identifier: CyLBgA40vp/0mxFWuunji8bjFIOfeuQR9ncbkiEctNQ=
Subject key identifier: 78:0C:63:0E:45:D1:49:B0:01:37:B6:7B:98:46:52:A5:AA:2B:D1:2B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7120BC584161653603840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4a5bbc4-ae63-3995-b027-4f992ec73f30.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 15321
IP address blocks: 207.164.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:12:0b:c5:84:16:16:53:60:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=9ff572ff-b3a9-42f5-ad1d-40491c18fbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:48:dd:a1:13:8f:3b:32:ab:1d:2a:94:56:
33:39:c0:0d:13:a6:dc:bb:ed:24:a9:c1:87:5d:83:
8f:de:37:9d:9a:3f:49:fd:5b:29:b0:57:fd:22:19:
99:df:4a:f6:bb:bf:30:fc:04:f7:e0:91:59:87:da:
de:fc:a9:f0:b9:a3:a9:c2:11:28:49:8c:7b:80:f0:
98:5e:3c:da:1d:6c:a0:eb:83:13:54:ee:3c:c8:4b:
a5:9f:9a:3b:2f:c1:e2:7d:e7:65:a1:2c:6e:46:89:
46:7c:7a:ca:02:5a:84:87:0d:4b:5d:69:b5:14:df:
f9:9a:31:99:1d:43:0e:82:35:c3:7b:b6:5b:5b:20:
73:11:4b:e3:54:ab:bf:1c:75:ee:3a:e0:cb:bc:4e:
6a:d5:b3:92:db:8a:9e:83:08:12:7d:0b:52:60:a5:
35:c2:11:06:31:80:a2:79:f2:62:c5:71:66:7a:bc:
3f:b2:88:92:55:0c:06:ef:cb:25:a9:de:16:04:1c:
71:8d:d8:6e:7a:4b:00:c4:0f:68:05:ba:83:4a:fd:
7f:cd:f0:e3:d6:e5:17:3e:f7:f6:5f:be:d7:ef:4c:
36:05:2a:9d:5f:1b:4b:04:5d:ff:69:7e:5a:c7:11:
c6:e8:9b:36:89:df:95:b3:16:f2:5d:6d:af:8a:43:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0C:63:0E:45:D1:49:B0:01:37:B6:7B:98:46:52:A5:AA:2B:D1:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4a5bbc4-ae63-3995-b027-4f992ec73f30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:91:62:c3:f5:5d:4a:3b:cc:13:e7:ba:27:66:3e:d8:95:37:
09:19:fe:47:72:35:fc:9e:76:61:d2:38:6c:61:32:d0:54:35:
44:a5:0b:91:1a:6a:ae:0e:69:12:24:a7:f6:43:de:66:a9:fe:
6b:9e:66:4a:fa:88:19:6c:0b:c2:5b:08:fe:a8:01:0b:7d:ae:
62:6f:10:f6:b3:0f:ea:f1:fc:54:e2:af:6b:54:e5:34:49:4f:
69:c1:70:fa:e8:3a:70:f8:95:15:54:a1:52:62:60:c0:40:83:
7b:3d:0d:c6:16:86:5f:61:af:cf:e7:5a:09:19:fc:59:30:8b:
8c:26:39:d7:d3:8c:15:64:f4:02:8f:9b:86:81:40:38:c9:e5:
7d:68:5a:59:2c:c8:ec:ff:e3:6e:2e:08:6c:61:f7:b7:c3:8e:
7d:f0:24:68:39:3a:34:db:9a:ff:f5:64:2d:df:2e:24:29:45:
f3:f1:2c:fe:2f:48:c8:69:7d:5e:24:74:7a:50:49:d9:86:e2:
3e:42:56:0e:27:88:c5:77:f2:34:c7:d1:4b:bb:be:2d:32:c7:
1a:18:97:40:48:ca:66:04:57:97:d3:54:ff:88:70:04:02:e8:
19:c8:cd:7e:b2:0a:4f:d6:52:7f:0f:0c:78:59:8a:f8:a6:d5:
6e:b7:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:56 2025 by rpki-client