Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4d21679c-3ab2-39bb-a019-b39afdf9163c.roa
File: 4d21679c-3ab2-39bb-a019-b39afdf9163c.roa (raw, json)
Hash identifier: G3H0+O1eu+8ZXe4V+/0fE+/ZT1Jgl7u6Zey8a4LYokM=
Subject key identifier: 18:F9:9B:29:0C:62:5E:C8:7C:CF:9C:05:F2:DF:6D:07:A2:BC:62:7C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6D508C7466EE293C98500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4d21679c-3ab2-39bb-a019-b39afdf9163c.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21723
IP address blocks: 207.35.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:d5:08:c7:46:6e:e2:93:c9:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=f8b77da4-f44e-4b92-b819-66a75cc9df6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:f0:15:27:c1:f6:8c:6c:07:e0:ad:47:b7:
84:ee:ca:56:9a:80:8c:a8:34:20:56:b0:8a:50:b1:
f0:b7:ca:e7:e2:38:0a:4b:47:ee:4c:5b:cb:3b:21:
c3:43:e2:2a:40:0a:9c:b0:fd:ef:eb:9b:bf:a1:74:
fb:96:3f:ef:ed:fe:18:a8:0e:55:7e:f3:0d:5d:27:
da:72:e6:a0:79:d3:8e:d6:bb:a9:90:83:5f:f4:5b:
7a:61:20:f6:d3:aa:10:6b:84:16:a3:f2:49:ea:57:
4c:a4:a1:66:90:29:ad:5d:b8:12:55:1f:b3:47:0e:
58:a7:bb:f7:26:59:a7:35:4e:ca:7b:7b:42:a2:c4:
61:44:e6:a0:10:ec:81:0a:12:9e:58:2f:9c:48:13:
bc:5d:17:d0:b1:13:ba:23:99:b8:53:3a:9f:b7:96:
16:54:a7:15:64:6c:79:b7:e2:a0:69:c6:3a:b0:03:
e4:85:a8:12:e9:f5:9d:c4:2a:70:af:7b:41:98:6a:
05:76:18:c9:95:fe:54:a5:d2:82:bc:a5:19:d3:08:
e1:90:7c:82:8e:74:58:97:82:ed:b2:70:c5:31:3f:
86:b4:b8:12:c8:09:1b:d2:af:0f:d5:16:5b:ac:55:
a1:15:79:52:4c:8b:00:6b:0e:c8:63:b5:ab:a5:c1:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:9B:29:0C:62:5E:C8:7C:CF:9C:05:F2:DF:6D:07:A2:BC:62:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4d21679c-3ab2-39bb-a019-b39afdf9163c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:29:ea:d9:e4:39:92:c0:99:18:50:88:74:4e:86:bc:14:74:
69:60:be:48:be:7b:cc:e2:01:a8:01:09:8a:a2:29:a2:c7:cb:
c9:e7:15:ba:81:03:e2:15:e2:cf:b3:59:0a:d2:e5:ef:c1:32:
db:11:6a:5b:16:f3:b8:1c:1a:2e:5b:ca:49:da:7d:c1:54:c2:
1e:c1:0c:86:32:5e:55:c5:23:c4:b0:08:1f:93:24:6d:79:dc:
95:87:01:36:0f:65:6b:6e:b2:2f:c7:73:c4:62:e7:a8:fd:e5:
6e:a5:29:b6:94:f7:84:51:93:c4:35:ca:21:a9:8e:26:21:e5:
ac:91:c4:85:bc:c5:f1:d1:bf:d1:0f:55:22:55:2e:e3:49:ad:
2a:04:7e:d6:6b:eb:03:f0:10:25:70:02:ef:0d:7a:4e:b1:d1:
5b:ba:9d:23:eb:66:fb:8a:dd:be:fe:8b:43:4d:cd:1d:f2:c6:
11:46:9d:76:bc:39:31:1d:f6:fe:9e:f9:2f:1b:3f:c1:44:d5:
e9:06:82:af:ab:bc:63:2a:5c:07:0e:17:f8:63:fd:f9:2d:ed:
c2:2c:93:68:22:59:de:7d:5a:b9:10:c7:c4:65:b1:40:82:cd:
2d:35:bf:da:a9:ea:1d:d9:db:51:45:b4:8c:16:94:15:24:b2:
50:ca:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:23 2025 by rpki-client