Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8fa85da-78b5-371a-86b0-4146356d0a94.roa
File: e8fa85da-78b5-371a-86b0-4146356d0a94.roa (raw, json)
Hash identifier: EHNIjkDJ0P1yIQDQns1Yh7rLuokSFOrumnv6Z4VXS60=
Subject key identifier: 23:C2:6C:9E:A7:41:78:B7:03:1A:55:75:2D:85:5F:58:6C:D0:93:83
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213433D2B3719EC38368DB80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8fa85da-78b5-371a-86b0-4146356d0a94.roa
Signing time: Sun 09 Mar 2025 10:20:41 +0000
ROA not before: Sun 09 Mar 2025 10:20:41 +0000
ROA not after: Sat 07 Jun 2025 10:20:41 +0000
asID: 577
IP address blocks: 142.170.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:33:d2:b3:71:9e:c3:83:68:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:41 2025 GMT
Not After : Jun 7 10:20:41 2025 GMT
Subject: CN=8a607024-5cfd-4e56-8dbc-3233768149df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:5c:de:26:8a:bb:3e:a8:7f:16:51:d9:f2:
14:d9:86:4d:fb:56:c0:ac:b3:b5:79:b6:89:dd:36:
53:e3:2e:b4:a8:0f:d9:bd:df:91:ad:1e:f6:88:0f:
a6:15:ec:9e:4a:3f:4d:b7:58:ff:2c:89:60:b7:da:
cb:c5:66:df:2c:69:c2:4a:c1:5e:64:de:3d:d8:0f:
e2:33:f6:08:28:87:fd:e1:e0:53:e8:d9:17:19:c0:
53:fb:d7:92:60:d2:1e:45:ee:c7:7b:d7:d9:21:db:
d9:8c:e8:21:64:70:ae:9a:f2:33:e3:a7:ea:ef:65:
ed:f2:3c:0f:56:36:0c:ee:de:59:d3:73:bf:5f:98:
83:93:ca:76:10:7a:93:de:ff:46:58:03:93:3f:7c:
33:13:f1:d5:cc:b5:d0:2d:b8:ba:bf:c6:05:03:57:
59:26:29:af:c2:f2:23:98:91:ac:ca:c8:b7:7a:13:
42:0f:9f:f3:a9:4f:8d:67:df:d7:d4:04:19:31:6e:
2e:4b:6e:e5:bf:25:33:d5:24:f6:52:0f:92:86:e3:
94:10:d2:3d:cf:4f:f2:75:8c:b5:e2:b7:9f:a2:e6:
7a:22:da:0e:3b:c4:9b:ae:d2:ef:d2:97:c9:9d:41:
6b:f8:40:6c:70:ed:2e:7d:9f:34:d6:96:8b:26:09:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:6C:9E:A7:41:78:B7:03:1A:55:75:2D:85:5F:58:6C:D0:93:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8fa85da-78b5-371a-86b0-4146356d0a94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:e7:db:0a:eb:21:d1:97:a2:60:1d:07:84:83:40:7b:6c:86:
f3:2e:91:5c:76:39:17:d8:b6:9d:c3:a6:81:44:ed:8c:11:1f:
73:23:86:c5:54:70:9c:6d:52:1e:52:47:16:4c:24:11:a3:f0:
90:bc:3c:4f:ae:8d:4d:af:71:8e:64:4a:b1:78:52:ad:96:77:
6e:e0:92:d4:25:cf:88:45:e6:e7:f2:eb:91:82:b2:40:83:ee:
36:47:bd:70:07:c7:64:08:f9:17:f9:45:2b:d5:2b:ab:3a:2a:
8c:51:b4:8d:80:8f:9e:17:0d:a9:eb:3e:61:58:d9:2f:59:15:
94:20:78:45:59:3c:60:4c:dd:e9:2e:29:ba:bf:35:e5:e1:e9:
5a:e6:10:5b:e0:ee:df:38:da:40:56:f0:9a:03:ea:cb:dd:0b:
a9:63:51:bb:3f:08:57:57:77:a1:9d:56:f3:09:c0:1c:9d:f3:
01:43:37:0b:b0:fa:7e:d8:b4:6c:44:b4:16:0e:3a:bb:e3:1c:
2a:1c:bc:b9:5c:28:c4:96:9c:fc:86:07:4d:b3:51:aa:27:09:
ec:b2:aa:a4:f0:37:11:2c:28:a4:1f:0d:2c:49:a3:84:3e:f9:
07:45:ba:ed:87:64:c0:ed:ac:96:bb:d4:67:49:ca:a9:9b:19:
2a:a9:eb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:41 2025 by rpki-client