Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec30283a-12c7-3d6e-bb0b-15a42ebdb5f0.roa
File: ec30283a-12c7-3d6e-bb0b-15a42ebdb5f0.roa (raw, json)
Hash identifier: QOYnfj0JLyqALSh4eCc8itjiZicxbBLOtZFA5Xy7fn4=
Subject key identifier: 3C:BF:80:A4:0D:B3:DB:30:83:C4:ED:CB:F0:CB:31:E5:A3:6B:9D:69
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134450627A733FA614D4FC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec30283a-12c7-3d6e-bb0b-15a42ebdb5f0.roa
Signing time: Sun 09 Mar 2025 10:20:49 +0000
ROA not before: Sun 09 Mar 2025 10:20:49 +0000
ROA not after: Sat 07 Jun 2025 10:20:49 +0000
asID: 577
IP address blocks: 204.101.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:45:06:27:a7:33:fa:61:4d:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:49 2025 GMT
Not After : Jun 7 10:20:49 2025 GMT
Subject: CN=2f07bfa6-e45f-4c5a-9c4f-b0e1bb7dd292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:93:d5:cc:db:66:64:b4:47:c1:eb:60:69:34:
50:9e:ad:f1:11:34:d5:f1:8e:c1:f4:51:e1:27:ed:
c9:08:ba:36:a0:43:c4:04:e1:61:30:10:ea:d6:e9:
72:34:16:97:02:b5:07:bc:50:6e:6d:fc:87:ee:5f:
b7:93:c5:e5:b0:eb:b1:da:dd:d6:31:47:4d:26:ae:
04:6b:7f:cb:25:7d:80:55:24:14:39:ab:cd:30:fa:
f9:c3:b6:91:61:69:d6:30:09:71:cc:8c:96:33:57:
43:2e:bc:63:d1:ed:84:90:2f:32:a4:f2:64:a0:f6:
a1:ae:ce:fe:cc:32:0c:a7:9b:25:8f:2e:30:b2:59:
63:09:68:2b:88:e9:6b:46:76:d0:4f:e9:43:3c:c6:
b3:4d:85:9d:e2:55:68:2b:1f:c9:73:29:3d:3b:89:
ff:7b:7a:df:cd:b3:a7:2e:0c:b2:96:9d:9d:d2:9c:
41:ba:b0:3b:35:dd:23:e4:ce:88:03:35:3f:49:2d:
9d:4a:42:bf:14:5a:e4:8b:be:93:a9:cd:33:24:cf:
e7:00:5b:97:18:af:e1:74:4f:39:64:b7:7e:06:b2:
50:55:83:7b:b3:67:b3:e1:a8:48:59:08:80:67:de:
03:55:a1:be:2b:5c:61:6a:79:26:4a:37:15:b0:7d:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:80:A4:0D:B3:DB:30:83:C4:ED:CB:F0:CB:31:E5:A3:6B:9D:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec30283a-12c7-3d6e-bb0b-15a42ebdb5f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:b0:81:0e:99:0d:50:30:a1:e4:ad:9a:a1:9f:c3:00:54:dc:
8c:4d:2a:eb:a5:7b:35:2e:6e:66:ea:d6:20:1a:8c:dc:3d:af:
54:68:4c:5b:30:ab:1f:f8:ff:2a:af:b6:af:49:05:d7:d3:16:
e4:d8:db:8f:22:b4:9e:58:53:2f:bf:ad:0d:55:d0:41:d5:34:
ab:c3:ed:17:44:d8:41:f4:05:5d:a8:aa:59:77:d1:6b:66:61:
dc:76:3b:d6:35:74:ea:9a:8b:67:94:5a:09:d0:b7:23:06:90:
e2:19:76:03:4e:60:3b:e9:f7:0c:aa:b5:17:e7:81:5e:91:02:
d8:9f:3f:76:ae:0a:f4:40:da:f7:3a:48:6d:62:35:ba:6e:6b:
b3:3b:7b:68:ee:fa:8d:92:6d:6e:b1:59:b0:dc:bc:0d:12:12:
00:8a:fc:5f:7b:77:b0:ea:d1:49:a2:91:4b:f7:80:b4:11:13:
b8:75:b6:32:35:3e:dc:bd:c7:4f:40:26:05:3f:1b:d5:dd:dd:
a4:bd:02:a5:23:f4:9b:ee:2d:b9:dd:40:4d:ce:15:28:6d:09:
c4:b3:09:4f:96:8e:66:c1:ba:5e:98:45:36:55:c4:fe:8c:34:
00:76:c2:96:db:c5:93:99:ad:87:6f:a8:f0:b9:90:7c:e7:45:
4d:20:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:51:05 2025 by rpki-client