Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5cdb477-b5b2-379c-9b73-31a0473ddd74.roa
File: d5cdb477-b5b2-379c-9b73-31a0473ddd74.roa (raw, json)
Hash identifier: Y6My35NW3UiuaYYPm9OqLnwyaCblaqBE4Q+HSI52daA=
Subject key identifier: C9:73:1A:0E:C5:A9:5E:F8:E6:85:F3:0D:AF:9C:F8:E0:9A:C6:F1:81
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29486525F1D8D80BFAFD80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5cdb477-b5b2-379c-9b73-31a0473ddd74.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 174.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:48:65:25:f1:d8:d8:0b:fa:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=26bc0af3-5649-4b16-b148-d192d7f1c25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:89:15:d2:9d:65:ed:ab:9a:0e:5a:a9:ab:
80:6c:bb:54:b6:43:cf:6a:1b:4b:7f:3c:0e:8c:d0:
88:e7:69:e3:d5:34:36:06:5e:dc:97:9e:bf:07:40:
02:45:8c:78:9f:4d:97:a3:ff:d9:ed:91:f3:04:8e:
4d:05:7a:f0:92:e4:63:11:32:97:49:f0:ec:52:69:
59:92:c1:56:1a:b1:48:91:93:68:b8:2b:c2:dd:1e:
7d:ae:1a:cd:7b:f6:a4:5c:62:ed:c7:16:96:c0:39:
da:3d:a0:17:e8:0a:72:91:ba:3c:87:d8:18:f4:6a:
b9:3b:c9:6a:f2:84:ab:99:37:43:a5:96:6c:a3:cc:
c1:c3:07:c0:1b:b3:e5:93:17:01:6d:e9:be:8c:70:
ef:65:51:fe:a1:b8:bb:a5:ac:0a:df:1b:81:e6:f1:
c5:b1:0d:ec:29:2c:11:25:b8:3d:ee:ac:9f:f7:fb:
58:33:fb:17:12:07:ad:ef:ee:09:93:3d:c9:c6:26:
8a:39:12:be:6f:dc:79:2f:a6:03:b5:1f:f8:40:b3:
00:36:60:b2:47:08:8e:a0:f7:55:0e:70:8b:d3:2d:
71:0f:e4:19:65:fe:1a:56:ec:64:0d:44:25:d1:0e:
11:80:a1:39:39:56:d9:f4:55:d8:70:c1:4d:10:37:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:73:1A:0E:C5:A9:5E:F8:E6:85:F3:0D:AF:9C:F8:E0:9A:C6:F1:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5cdb477-b5b2-379c-9b73-31a0473ddd74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:31:40:92:43:c0:c0:f9:3f:3c:18:68:ac:03:7e:42:81:86:
a4:e8:2c:cd:46:ea:54:88:11:85:82:51:fd:24:74:3b:7b:7d:
fd:5c:ef:e4:a2:da:51:44:71:e5:e1:01:b4:45:6d:6e:08:f2:
f2:88:57:04:22:c7:8c:73:2e:5e:31:07:8f:5d:74:4d:e4:c7:
df:c7:77:64:ab:90:fb:d6:6c:11:25:17:e1:3f:f7:b9:75:3d:
6d:cc:b2:e4:fc:e2:bf:14:54:93:87:8e:7c:c9:fd:4d:7b:eb:
83:6f:c7:b8:ca:9f:33:f0:71:2f:42:54:e6:3a:1a:2b:6e:9d:
48:8f:a6:38:75:53:e6:f9:45:33:dc:35:93:0c:a9:f5:5b:a2:
cd:87:ab:fe:db:74:b2:c0:56:f0:a8:d0:e7:3b:cb:bc:5a:b5:
7c:cd:f8:e4:83:e0:58:15:9e:05:ec:81:0c:84:96:92:c8:f8:
7d:0a:a8:6e:34:4b:21:a3:4d:9d:fb:25:92:6a:ea:fd:e9:45:
8e:7b:23:21:f9:64:71:5e:e0:73:f5:83:be:53:1d:be:7e:93:
1e:1c:47:c8:da:b8:7a:e1:10:09:26:f8:ca:5f:33:09:50:21:
49:40:ce:1e:70:0f:51:39:d4:cf:44:55:aa:d3:eb:d8:df:e6:
c3:fe:1d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:25 2025 by rpki-client