Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4f66b31-3ac1-332c-a773-d9cd5bccc0af.roa
File: e4f66b31-3ac1-332c-a773-d9cd5bccc0af.roa (raw, json)
Hash identifier: AAYgQ0TBkvwDbEbF0I07DLDaH5+/08nZcyMQiQXubVI=
Subject key identifier: 8D:80:9C:90:A1:12:E6:DB:92:31:50:C8:F9:9E:FA:D9:26:80:2D:D5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921345453F479CB84C3F09880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4f66b31-3ac1-332c-a773-d9cd5bccc0af.roa
Signing time: Sun 09 Mar 2025 10:20:56 +0000
ROA not before: Sun 09 Mar 2025 10:20:56 +0000
ROA not after: Sat 07 Jun 2025 10:20:56 +0000
asID: 577
IP address blocks: 207.164.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:54:53:f4:79:cb:84:c3:f0:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:56 2025 GMT
Not After : Jun 7 10:20:56 2025 GMT
Subject: CN=d67a2118-8c47-4bb7-8644-a3bf0430d1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:f0:28:93:8a:e6:66:91:0f:ec:15:04:f1:
5b:8a:b1:ab:74:30:1d:af:2b:40:cc:25:54:8d:a2:
2c:7e:53:7e:40:f5:da:a6:32:64:53:32:f0:36:fe:
60:c5:03:ed:1c:62:5c:95:cd:7e:93:79:10:cf:32:
a2:03:00:b1:67:5c:0a:a4:6e:8f:0d:eb:74:ab:b5:
1d:11:2d:c8:19:55:41:85:fc:11:10:68:d7:7f:d9:
e8:10:af:c0:c3:4b:8c:f6:33:7c:18:7d:f2:a6:df:
bb:7f:20:99:7b:1c:02:a0:99:26:48:19:f8:ef:14:
ea:6a:61:ff:a6:57:b5:8b:83:79:f1:9c:c5:21:77:
c8:21:b9:2f:c6:1e:6c:85:98:de:24:36:84:99:db:
da:70:53:0e:37:56:d2:64:bf:be:10:94:b6:e1:ce:
85:ae:cd:96:63:d4:88:63:a6:10:63:95:ea:8f:26:
fe:3a:00:2b:0f:bb:66:4c:ff:92:db:f0:58:7e:e9:
13:bd:8d:14:8f:ee:ee:9c:b4:4b:36:da:a8:5e:36:
dd:f7:31:10:6e:40:e1:4a:79:8b:18:d9:10:2b:c4:
07:b5:a5:5d:25:0b:7d:9a:a3:9b:d9:0f:92:40:2f:
bf:a7:76:1e:bd:87:21:1c:84:d2:b1:bf:db:e6:07:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:9C:90:A1:12:E6:DB:92:31:50:C8:F9:9E:FA:D9:26:80:2D:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4f66b31-3ac1-332c-a773-d9cd5bccc0af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:d5:14:a1:f7:dd:19:83:28:d7:4c:25:6f:75:92:d0:5b:af:
ba:fd:f8:e0:ee:ff:3f:f1:31:d0:d5:6e:3f:2c:00:77:59:71:
7f:33:1e:d7:58:50:2b:9e:e9:87:ad:ff:d0:a6:18:82:a3:8e:
f1:a5:58:b8:94:01:6e:78:46:7a:3c:9e:ec:a8:4c:08:75:51:
40:78:00:18:32:0c:02:41:62:3a:56:da:dd:e6:d2:82:1f:7a:
e0:cb:b9:9e:e8:44:4e:12:61:86:75:60:18:56:33:23:7e:ea:
5d:de:ee:2d:ce:b8:e3:ce:3b:07:0a:c5:e5:8a:e6:a8:86:65:
60:fd:dc:b7:57:90:a5:42:61:f7:bd:d0:cc:da:ec:62:3f:5a:
a8:3e:fa:69:ae:01:8c:af:ec:54:bd:ca:34:4c:f9:79:da:df:
ab:f1:0e:6c:41:65:f6:7d:40:6d:43:62:49:ad:55:0d:0f:0b:
8b:08:9a:a2:ef:7e:25:d7:8a:b0:66:7c:eb:3d:c8:aa:c8:98:
8a:54:df:39:f8:4e:0b:d6:25:be:40:3a:78:83:53:5a:d7:ce:
07:ba:0b:79:04:c8:95:ec:1c:f6:0e:bc:77:35:41:7b:02:0f:
e9:a4:e6:69:3c:65:a2:86:a6:6b:e9:83:1b:bc:f1:b8:0e:21:
52:a9:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:13 2025 by rpki-client