Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8de43fd-ca68-302d-95fb-85e8c4ef93a0.roa
File: d8de43fd-ca68-302d-95fb-85e8c4ef93a0.roa (raw, json)
Hash identifier: JnCJH+/a/yPJQnxvT43XBpEOXymziMLSVqA9pHoH3YY=
Subject key identifier: 94:A4:87:B7:08:70:CD:CF:DA:BF:D4:3E:0F:AB:E6:D3:83:F4:F6:A6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213435E9BD4BF07ECF354B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8de43fd-ca68-302d-95fb-85e8c4ef93a0.roa
Signing time: Sun 09 Mar 2025 10:20:42 +0000
ROA not before: Sun 09 Mar 2025 10:20:42 +0000
ROA not after: Sat 07 Jun 2025 10:20:42 +0000
asID: 7122
IP address blocks: 170.199.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:35:e9:bd:4b:f0:7e:cf:35:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:42 2025 GMT
Not After : Jun 7 10:20:42 2025 GMT
Subject: CN=2ac7ae60-a77b-49e1-8b6f-e6fdcb59563a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:de:04:5e:94:bf:c8:77:0e:56:83:b8:fc:
97:d2:cc:c1:4a:ae:f9:d1:78:2c:7b:9b:70:52:b9:
5a:4e:d0:ad:4d:87:f3:08:e9:ff:52:43:0d:5b:fa:
da:fc:e6:5a:c9:ff:81:4e:48:e3:d1:b1:49:00:a0:
9d:f7:8b:49:e6:6c:cf:d3:c1:e6:11:53:d6:58:0c:
22:3d:e9:ba:e8:bd:a2:f5:76:c8:13:82:54:fa:11:
05:42:08:2d:37:c3:68:a9:00:c6:08:dd:29:73:60:
ad:e9:99:36:33:28:8d:4e:d7:da:5b:81:2b:3d:91:
4c:4d:e2:f4:6b:0a:6d:c1:e7:ca:fd:4b:1a:d1:f9:
72:e2:78:20:c1:0d:65:f4:3f:0d:d3:2c:bc:1d:9c:
15:67:f2:bc:ab:0e:d7:e6:a5:aa:34:77:51:0b:5a:
dc:ea:01:bf:9a:4b:cd:ef:eb:ed:26:3f:f7:81:6e:
4e:a6:2a:06:15:4c:dc:09:1c:48:2e:eb:1c:97:9a:
fa:f2:45:23:dd:ae:6a:5a:4b:df:db:2f:81:7d:6f:
e9:92:5e:c2:7d:5d:49:db:e4:b9:e9:84:c5:ea:62:
ec:06:55:9f:41:c8:e8:c4:12:7d:89:63:8d:31:b5:
04:5f:2e:48:2f:07:5e:ef:b3:29:5a:1f:66:3c:c1:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A4:87:B7:08:70:CD:CF:DA:BF:D4:3E:0F:AB:E6:D3:83:F4:F6:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8de43fd-ca68-302d-95fb-85e8c4ef93a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
170.199.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:25:94:70:24:d4:cc:27:16:b7:58:25:e7:75:3a:fe:d8:ae:
a5:11:2d:dc:29:ee:21:a6:50:6b:33:18:07:31:f6:93:a8:b1:
da:7e:72:14:95:ec:5b:50:8a:0b:da:3b:c9:e4:0c:61:01:0a:
42:2a:e0:fc:d8:7c:50:40:25:16:96:24:b4:d5:48:c5:2d:77:
04:6b:95:28:b5:e4:7a:89:bd:78:56:ab:cc:01:8f:dc:61:41:
8b:f8:05:ac:66:bd:ed:12:ee:07:55:62:01:89:af:7a:ae:5a:
90:47:cf:85:26:3e:96:bd:6b:c7:17:f4:f7:30:92:4b:30:1d:
0a:a8:ca:75:87:41:ee:c6:29:fd:98:1d:3d:c6:7d:2c:89:b3:
39:d1:b5:08:df:e5:79:22:a2:e7:30:29:10:30:85:28:ce:65:
2a:92:ea:41:df:15:bc:eb:a2:9f:c4:40:55:89:8f:38:8c:9e:
02:9c:b6:14:22:ac:6f:2e:86:6e:9e:d3:0c:ea:ab:55:8c:0d:
fc:4f:68:d4:21:c1:8d:ac:30:a0:e0:54:ec:65:ec:7f:65:1a:
4b:c7:5a:4b:65:22:e6:3b:cb:ee:16:ac:8b:04:53:a2:cd:d7:
ee:4a:88:50:92:50:f6:66:7a:b5:9f:2e:6a:47:23:ba:9d:25:
10:67:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:37 2025 by rpki-client