Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa
File: d691d77a-2a2e-3631-9e05-38a798f0b995.roa (raw, json)
Hash identifier: eW0vzaTum4l9OqDP1/ioGOHQvXjx3zs2Zi4bKmIfo/w=
Subject key identifier: 79:45:5B:72:41:1A:8B:10:E1:08:F6:1B:74:78:C5:26:F2:5F:E9:29
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858487CEB263C4F994E9DA4CBEFC0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 29802
IP address blocks: 91.191.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:26:3c:4f:99:4e:9d:a4:cb:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=f5990446-8673-44fa-bccf-4e6b588f1c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ed:31:67:45:a8:ea:49:5a:ee:4d:da:e2:d2:
12:68:c7:e9:51:d7:da:ed:10:07:e2:25:25:81:31:
be:a5:fc:56:19:04:95:26:1e:07:5d:a1:7d:ff:53:
b2:c5:3f:36:9e:03:13:0a:f1:ed:29:70:c5:ce:38:
70:f5:19:9c:ee:cc:7f:b1:9e:07:dd:b9:83:2d:d0:
7e:92:e4:b1:dc:8d:ed:ea:e2:36:be:76:d6:e4:28:
95:e6:cd:50:2c:80:f4:36:3d:05:94:8a:98:6a:d9:
45:3a:b8:5f:56:d1:62:18:8d:3c:fb:33:30:74:3e:
26:e0:95:49:4b:61:b7:11:fb:7b:1d:c9:52:ec:29:
45:cd:68:92:f4:1a:fb:41:c1:29:90:99:96:99:19:
74:02:f4:e0:ef:9f:eb:4c:8b:bb:3e:f0:2c:1f:96:
90:39:e2:95:cf:f9:bf:f3:33:66:e9:72:b4:25:dd:
29:4d:11:96:ae:08:99:52:4f:0e:0e:8e:2f:69:58:
f7:5f:4f:07:fc:b5:80:cf:ad:84:cb:76:02:db:b1:
74:c2:ac:26:b4:3a:14:c6:b4:9d:20:39:44:70:ef:
ba:01:2a:57:b5:f2:ea:86:ff:84:e7:a0:8c:b5:22:
5e:24:ac:63:40:3b:07:85:a6:1f:b6:6d:63:00:73:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:45:5B:72:41:1A:8B:10:E1:08:F6:1B:74:78:C5:26:F2:5F:E9:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
91.191.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:70:46:a1:28:48:70:f0:84:52:d5:4b:e9:6e:fe:10:c8:f8:
98:2b:ad:f4:b6:48:1a:c1:33:a0:6c:1b:8a:6d:64:0b:48:61:
fe:33:4c:42:14:21:e0:04:2b:01:82:78:40:1b:94:1a:59:9b:
a9:3b:80:30:a9:dd:20:0b:de:3e:ec:8e:e0:36:a0:fc:ad:38:
0b:49:49:3c:3d:86:05:96:28:93:08:06:12:17:24:5c:d7:73:
ee:90:c2:81:5d:7d:07:ca:2c:e4:b6:a5:60:75:35:e5:2f:74:
27:86:ff:5a:ad:d3:3b:2a:2e:43:f7:f6:68:b8:8b:db:3a:2c:
b8:10:58:28:5c:4e:55:d9:7a:a4:c1:8e:98:96:4b:12:3c:65:
3c:70:b5:f6:e0:9e:11:de:5b:6d:7a:41:71:dd:9b:15:3e:25:
2e:05:03:4d:cc:7d:cb:2c:f9:87:94:1b:08:02:77:e0:b3:32:
5c:18:b9:fe:8b:95:a4:36:a3:f6:8c:c8:a0:73:93:49:6c:ad:
0b:51:1a:42:64:92:a9:ba:4b:4a:9e:19:df:c2:9f:68:81:cf:
1a:49:59:ec:e4:80:fc:91:a1:c7:ee:00:c5:ee:c8:3b:a9:ec:
8e:7b:17:d0:2d:7a:f3:5a:fe:9f:fb:79:b3:a8:c8:97:64:04:
fa:9b:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:59:39 2025 by rpki-client