Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dde9197c-4f20-3ee2-830f-50087fb88e14.roa
File: dde9197c-4f20-3ee2-830f-50087fb88e14.roa (raw, json)
Hash identifier: XSKbFP0gK+7uLUoK9jGyz3A9KgTvtvT5AuBgTlxb9uE=
Subject key identifier: 0C:20:2C:60:1C:BA:34:BF:1E:A6:B4:61:AA:51:E0:BB:EB:92:D5:E4
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931666F37EAC97C44D2F60E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dde9197c-4f20-3ee2-830f-50087fb88e14.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 397829
IP address blocks: 209.226.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:66:f3:7e:ac:97:c4:4d:2f:60:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=698856a4-3de2-4ecb-be5d-3da584b45816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:23:ea:79:64:5b:d2:05:98:88:b9:55:8d:
c9:34:61:4a:35:7e:ad:24:0b:0f:ab:04:7b:2c:fc:
e0:38:5c:da:b4:d6:51:e9:92:db:4b:e4:22:d5:f5:
88:a4:4f:1d:9f:ee:bb:92:0b:33:f2:d2:1c:ea:45:
59:78:1c:f5:0e:51:59:56:f3:e7:13:4f:b6:8f:fd:
c0:68:c3:cc:dc:05:93:b2:28:23:27:f7:13:0d:d0:
7f:4e:53:b1:73:fe:84:98:69:57:d7:cc:1b:6c:17:
27:f2:7c:f8:f6:bb:cc:60:8f:75:c5:e8:bb:f7:85:
62:89:4d:3a:86:1c:66:32:1d:24:98:68:53:68:ff:
0c:e3:b8:c0:88:2b:13:6e:8b:85:d2:de:c0:f7:76:
43:50:ff:14:15:70:75:69:c9:58:65:15:e9:b5:d4:
50:2b:f2:a0:8f:cc:65:d6:1d:06:14:cc:22:f4:57:
63:fe:51:76:51:9d:fc:1a:65:cc:d6:49:c1:a4:b8:
9c:78:ac:20:6f:64:ae:d7:30:94:97:47:c1:a8:a2:
8e:2c:97:9c:b6:1e:ac:c8:fb:2f:73:e8:ac:46:33:
a3:a7:64:75:33:25:10:65:5e:36:c8:75:a1:c0:42:
0e:dd:c2:b4:d8:3c:59:5d:35:b1:c1:2a:1e:a7:64:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:20:2C:60:1C:BA:34:BF:1E:A6:B4:61:AA:51:E0:BB:EB:92:D5:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dde9197c-4f20-3ee2-830f-50087fb88e14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:fb:f7:19:17:60:33:e8:b2:be:56:3d:3a:52:3d:92:64:3b:
b1:6f:fa:ff:98:f2:89:e3:fa:cd:3b:a1:ee:a6:f4:9c:bf:a7:
46:a2:35:38:ef:7a:b2:e4:1c:c5:f5:37:59:ac:41:8d:21:22:
7b:e7:39:15:62:ed:71:5c:50:8d:05:d1:be:60:d0:1a:8d:a4:
cb:27:37:5a:f8:f3:f2:ce:3b:7d:81:1b:aa:df:02:a8:64:2c:
7f:07:78:5d:94:3f:6e:30:a4:7f:40:42:94:a7:52:d1:6c:ed:
57:0c:5d:c6:82:26:70:5a:8a:4a:e5:d3:f7:2b:8d:0a:02:12:
db:88:84:9e:31:65:2e:28:7c:29:4c:e4:66:d2:c9:e1:bc:49:
98:f8:46:a9:0d:98:c6:85:7c:81:15:6a:8b:af:9a:a1:27:e7:
a4:e5:fa:88:33:ba:6b:14:68:42:97:8b:2a:3e:2c:13:5f:55:
e4:4e:69:c1:77:14:22:b3:d7:3a:23:70:9d:58:57:8c:b4:f8:
05:1f:69:02:6a:5f:30:fd:3c:b1:7b:f3:da:2a:28:ec:71:42:
2d:51:1d:ae:73:28:41:a2:a0:d3:cd:89:b1:1a:54:2f:ab:26:
73:a3:18:df:f1:d8:b6:31:37:d4:f5:6b:37:5a:ee:51:a1:48:
4e:96:15:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:15 2025 by rpki-client