Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d53ef3b4-e296-3a57-9a55-cd43e8012c16.roa
File: d53ef3b4-e296-3a57-9a55-cd43e8012c16.roa (raw, json)
Hash identifier: qrKkHkvqtLeVn+bx3xLbVCPX2kp6AnPUKF4EEK2kK5I=
Subject key identifier: FC:0D:0D:11:7D:10:F1:35:9E:07:FF:D7:2E:28:67:50:4A:F6:DC:CC
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F432858494E50BA6E2707170EAB2F6300
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d53ef3b4-e296-3a57-9a55-cd43e8012c16.roa
Signing time: Tue 25 Mar 2025 14:09:32 +0000
ROA not before: Tue 25 Mar 2025 14:09:32 +0000
ROA not after: Mon 23 Jun 2025 14:09:32 +0000
asID: 834
IP address blocks: 64.22.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:50:ba:6e:27:07:17:0e:ab:2f:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Mar 25 14:09:32 2025 GMT
Not After : Jun 23 14:09:32 2025 GMT
Subject: CN=d1d86cc2-d99b-4c4b-8f78-e89478559d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:fa:4a:e0:7c:77:d3:39:80:c7:f3:34:a3:
51:9d:2f:fe:20:36:8f:c2:38:1e:10:09:64:3c:82:
d5:e0:1f:d7:63:3f:7d:a0:cd:68:b6:52:01:ca:57:
91:89:61:50:c4:38:3d:85:db:4b:fd:62:3d:fc:35:
1b:67:1b:5f:1d:83:c3:1a:1a:db:91:33:4c:9a:b6:
85:ae:e2:94:f3:55:d3:db:a7:23:f2:e3:9f:e7:a4:
38:d1:71:d3:57:4d:15:f6:16:df:78:a8:60:e8:f4:
16:ae:de:94:44:b8:55:68:0b:58:dc:d9:ec:be:d4:
7c:be:90:73:8c:79:de:d4:eb:91:32:e3:e2:59:45:
51:43:8f:2f:fc:bb:24:a4:2a:4f:53:62:13:56:10:
a4:b3:fe:4b:58:40:10:27:1e:41:84:1f:86:96:d8:
39:49:93:bc:c4:72:c7:13:3a:d2:fe:78:c3:6f:32:
bd:5e:75:b9:1b:fa:81:93:b3:86:54:b7:75:f7:a2:
02:82:78:c6:fe:c9:4a:d8:d0:21:c2:10:c1:fc:d6:
21:a0:a4:6d:d6:ba:d9:73:f9:c8:30:35:8c:4b:5e:
8d:c4:86:4e:43:f8:36:6f:36:8b:0c:15:5b:04:78:
75:b4:57:5d:43:60:34:c2:fc:c1:4e:f4:51:67:5c:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:0D:11:7D:10:F1:35:9E:07:FF:D7:2E:28:67:50:4A:F6:DC:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d53ef3b4-e296-3a57-9a55-cd43e8012c16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
64.22.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:dc:6e:cf:62:72:06:81:f1:b1:83:f4:21:79:fe:a0:5d:b1:
c7:c5:c0:41:d7:a2:c5:26:72:a4:eb:35:62:07:a6:62:e6:69:
24:06:68:cc:35:43:99:b2:0b:20:8c:a1:b1:12:a5:3e:b5:77:
46:0c:05:de:f3:97:2b:80:42:5e:10:8b:6e:5e:b9:b8:6b:43:
f4:bb:8b:e2:91:07:95:64:94:f2:6a:91:3e:ff:e5:61:82:5b:
4d:d8:2e:e4:bd:89:11:21:9f:7c:46:45:58:03:62:be:38:09:
34:a2:74:9e:48:bb:7e:ce:12:3d:7e:c3:14:ab:8c:fc:5f:0f:
f0:61:43:57:a6:c7:1e:3c:79:14:a0:c5:a6:f8:e6:96:37:8e:
73:9d:d4:88:e1:7f:06:80:0e:f6:ec:85:bb:47:81:93:5d:b1:
5f:f7:be:ea:97:63:91:8f:b4:3e:1e:7d:fd:bf:11:8a:5a:dd:
ff:9d:23:84:d1:a0:fb:7e:ec:7d:80:ed:0d:76:3f:59:fd:e8:
bf:62:07:42:f6:d5:31:6b:cc:d1:b0:27:06:21:c2:37:ea:9f:
e3:32:90:03:63:74:1b:07:51:7a:17:ee:0c:0f:de:90:87:08:
28:a7:6b:8e:d4:d2:ee:7c:cd:4c:28:99:a4:ee:90:ca:d5:27:
78:7a:69:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:59:58 2025 by rpki-client