Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5a1d2d3-8a5a-3bc6-9a8a-0a5a05b1545a.roa
File: f5a1d2d3-8a5a-3bc6-9a8a-0a5a05b1545a.roa (raw, json)
Hash identifier: WlKI+VweHuRHn8e08HHk9K50sOMHsUwwP/k3obcypyc=
Subject key identifier: 42:4D:CD:33:22:2E:82:61:1A:C5:88:FE:2A:66:5F:5F:EA:94:15:22
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D29C3C95743A9BF780017AC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5a1d2d3-8a5a-3bc6-9a8a-0a5a05b1545a.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 21552
IP address blocks: 204.101.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:c3:c9:57:43:a9:bf:78:00:17:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=56b9e227-276c-4055-b0d8-7dcb9faf9233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:54:5a:99:7b:92:e1:13:b9:ea:eb:01:2e:
58:90:b2:59:b0:82:7a:f2:63:87:f9:1a:3a:ec:2f:
da:02:ec:a0:b5:66:71:ed:85:2b:b9:8d:30:c4:14:
22:84:be:cf:94:1c:76:56:44:7d:94:d5:b7:5b:81:
76:32:6f:20:b5:a9:a7:fa:d8:5b:f4:25:f7:aa:93:
a6:95:68:bc:b7:6c:d9:eb:8c:8f:45:82:8f:ff:68:
d6:42:b1:90:7f:41:01:53:a5:da:61:2a:89:0f:78:
e2:a0:b9:d1:6d:5f:11:a4:3a:6e:b2:1f:4b:1d:c1:
14:b8:ea:c9:34:ee:1f:5a:1a:8b:e7:02:54:ba:62:
1d:fe:28:9d:eb:d5:05:3b:31:3a:55:d5:3e:31:4a:
f9:7f:1e:6a:be:a0:9e:81:6e:6b:50:ad:f5:e2:aa:
1e:cc:0c:02:da:93:80:8d:52:19:7f:9b:db:98:f3:
36:53:f2:86:44:1d:6e:67:fa:08:7f:a9:08:cb:ed:
d4:ab:e9:48:c0:30:5a:79:34:1d:13:5d:f2:92:d1:
82:1e:c9:e6:f4:b4:fa:18:07:3d:e2:ae:66:66:a3:
70:85:86:2c:83:78:c4:d0:7a:7c:b0:7a:e6:fe:ea:
ea:38:2c:ad:e9:4a:cd:fc:0b:dc:01:94:c9:21:43:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4D:CD:33:22:2E:82:61:1A:C5:88:FE:2A:66:5F:5F:EA:94:15:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5a1d2d3-8a5a-3bc6-9a8a-0a5a05b1545a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:2d:bb:69:2c:ae:62:14:3b:50:bc:73:26:c4:68:ef:b0:00:
c1:58:60:0c:2d:60:2f:57:41:5f:74:17:61:b4:78:94:f7:24:
b5:14:72:74:1f:78:1a:d5:c5:8e:fb:35:4a:85:8a:56:53:e5:
9b:ac:86:25:3e:c2:90:7d:88:41:8e:71:15:db:fd:0d:fe:5b:
83:aa:a1:96:b8:9b:6e:8a:e2:ba:91:7b:2b:7d:20:b7:a8:c5:
9d:8c:01:dc:53:df:02:e0:20:ad:08:71:cc:31:b9:a1:f0:cc:
b0:9c:20:b7:be:42:44:6e:1a:0c:d3:17:fe:82:9f:3b:42:9b:
dd:38:77:94:66:10:c1:14:f6:f4:ba:00:df:f5:00:bc:40:f8:
25:02:6c:67:74:ed:12:c6:36:2c:12:4a:94:e6:f1:99:51:fa:
84:2d:11:61:ed:7b:1e:b1:b3:36:6b:f8:4c:9a:c3:af:be:dc:
3d:4c:7c:e5:3c:e2:7b:1e:1c:c9:c2:7b:f9:36:4d:60:f3:d6:
0d:2c:aa:83:1c:3a:32:42:32:16:0b:52:21:da:95:cd:e4:3c:
1b:01:c9:65:9f:86:bc:f4:8f:c3:b0:65:13:b1:b1:62:4d:33:
1a:2e:48:c3:86:d1:a5:59:6b:3f:17:f8:37:60:27:22:88:0d:
3d:67:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:49:27 2025 by rpki-client