Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa
File: 86e34e6c-0e06-342b-9c88-f3f080f46e40.roa (raw, json)
Hash identifier: jAaSizm/AuI86SG3FDWpX5kcKqkQs1ah3pVz5Pq4BBs=
Subject key identifier: 17:66:61:76:CD:06:FC:71:EE:7C:E7:1D:9D:52:0A:35:42:9A:82:E1
Certificate issuer: /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial: 010D0C9F43285848E16BD3A1558506413DF80B80
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 399507
IP address blocks: 91.106.220.0/22 maxlen: 24
204.52.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:d3:a1:55:85:06:41:3d:f8:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=37942f55-b186-46aa-a750-6ccef21254b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:dd:f1:1d:4d:d7:aa:86:f4:ab:1f:5c:96:
cb:3c:26:cd:3c:70:df:5c:a6:56:68:98:a5:03:8a:
ca:bf:59:4c:64:a9:6f:3f:40:01:65:ea:19:c7:f4:
e1:04:be:82:97:3a:5e:9a:60:fa:77:8b:db:0e:b6:
2d:3d:4e:17:32:16:68:5e:03:2c:d7:7d:6b:b9:2a:
90:00:b1:90:22:24:61:f3:9a:10:cc:17:83:fa:42:
f4:ec:ca:50:ca:5c:2e:43:09:85:50:56:d6:ed:b5:
da:4c:e5:09:49:34:f0:49:94:a1:44:46:96:59:ac:
fb:e4:86:5b:67:84:f8:36:df:89:98:d0:4b:12:93:
85:e7:7c:f2:05:e9:b8:3a:5d:91:7b:8c:cd:e0:42:
4f:7f:06:0e:89:e4:2b:04:b2:f3:cd:5e:88:fd:9f:
23:10:97:bc:ae:70:56:b0:5c:44:d0:24:11:62:02:
35:f3:de:38:55:7b:28:16:9e:e2:a9:f6:63:67:68:
13:0d:7b:c5:75:ee:f9:02:f0:66:59:c2:24:72:69:
db:4b:64:a2:56:87:b0:81:5b:68:ed:3d:fd:97:ed:
10:9d:77:d8:3b:03:21:e1:d6:e3:52:d3:c6:09:0a:
9a:ed:b6:41:2f:5c:c2:4f:f9:0d:21:94:dd:43:7a:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:66:61:76:CD:06:FC:71:EE:7C:E7:1D:9D:52:0A:35:42:9A:82:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
X509v3 Authority Key Identifier:
keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
sbgp-ipAddrBlock: critical
IPv4:
91.106.220.0/22
204.52.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:61:57:84:6f:2c:37:a6:56:fb:39:ac:2b:f4:aa:5b:b1:1b:
a3:26:07:e8:b4:6f:1e:f1:50:b4:c1:b1:ed:08:6f:bc:06:bd:
83:68:66:4e:9b:78:bc:fe:01:14:a1:96:89:f9:58:5b:e8:31:
76:cc:bb:db:08:aa:f6:3e:da:3d:4b:09:7c:f0:60:b2:15:ef:
af:39:ab:6b:5e:bb:ec:61:8e:31:8a:9c:ee:5d:76:60:97:24:
78:db:4b:10:75:c4:49:84:e6:dc:ec:cb:fb:0b:f8:d8:c6:ed:
12:81:cf:36:06:57:02:e8:10:84:97:e5:52:18:99:be:8a:96:
b2:14:ba:92:0a:8d:03:2d:85:be:1c:d3:85:bd:a0:f2:67:17:
08:56:a8:f9:2e:25:b3:75:5d:2a:58:65:c9:7b:0d:01:56:d2:
66:47:e2:cb:e5:35:3c:0b:9e:df:ca:ad:68:ba:2b:40:5b:73:
18:e0:94:aa:31:97:a2:fd:c0:f6:55:55:71:d4:13:ce:28:1f:
cb:4d:fe:f6:ca:0b:29:72:96:db:4a:13:72:15:ed:e6:8b:6d:
5c:ef:06:8d:d2:ac:15:82:ee:95:60:b2:17:e5:14:b5:4a:37:
aa:79:4c:cb:68:da:4d:7f:4d:55:d6:2e:36:96:90:21:08:a1:
78:09:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:37 2025 by rpki-client