Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/893e28ec-7c52-353d-a381-4f106c4e1d6d.roa
File: 893e28ec-7c52-353d-a381-4f106c4e1d6d.roa (raw, json)
Hash identifier: 6DKcw1Q4lh1PYB+m7/8hQonBcXj/vPuSimY7BCsYqoI=
Subject key identifier: D1:D2:66:C1:5F:86:64:80:12:D7:3C:2E:45:B0:13:4A:13:CD:62:EB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B796EE39A61D6995459500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/893e28ec-7c52-353d-a381-4f106c4e1d6d.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21723
IP address blocks: 209.226.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:96:ee:39:a6:1d:69:95:45:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=48c478cc-a67f-4dcd-9abb-1f8938c307b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:c0:16:44:f4:5f:d7:8c:4b:86:83:d4:c5:
98:c2:f5:8b:a1:39:5e:95:a5:51:8e:50:95:ec:53:
05:1c:38:95:8f:40:04:48:6e:94:7e:17:4b:31:a1:
4f:0e:9f:1d:b8:7c:51:ce:c3:76:4c:dc:05:f0:98:
60:23:e3:a0:b4:6a:34:d2:3b:6d:0d:0f:f4:2b:7b:
70:e4:b3:ee:27:2f:3f:8c:1a:50:0c:1d:d9:f5:47:
78:34:06:46:09:c7:e8:a5:51:4a:7f:12:fd:7d:fe:
b2:66:b0:0d:26:65:f2:e8:81:2e:b9:e4:13:ac:23:
0c:cf:1f:e6:6c:ed:8c:53:e0:cd:69:84:8b:22:14:
02:5a:1e:52:5b:dc:3c:6d:5e:50:9a:fe:6c:fb:c8:
d0:52:2a:f4:88:fa:91:e7:d3:75:12:83:70:a5:43:
dc:60:3a:ff:5c:46:ba:04:6c:de:69:31:32:6b:fb:
fc:9b:a1:2e:d4:8b:f6:54:f2:4c:25:e6:f9:41:88:
1b:39:df:2d:6d:27:c5:ed:8f:6b:59:f7:12:3b:57:
05:0f:c9:43:26:8d:d9:5c:c3:58:55:45:ad:56:4c:
4d:7f:bc:42:f7:21:c6:69:08:4d:43:f5:74:60:ca:
22:f4:d7:66:f0:27:11:15:dc:6e:9c:15:20:82:cf:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D2:66:C1:5F:86:64:80:12:D7:3C:2E:45:B0:13:4A:13:CD:62:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/893e28ec-7c52-353d-a381-4f106c4e1d6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:8f:09:cb:e1:2f:50:e6:e6:38:f5:b2:8a:cd:7e:e5:be:29:
b3:e2:52:36:36:3a:a0:19:c5:35:de:3b:d6:94:f5:65:d0:ac:
3a:25:f0:03:cb:55:20:0d:61:45:a2:08:df:6a:12:24:53:50:
ab:5d:43:a4:9b:fd:dc:7a:cb:80:56:b0:39:0b:c0:7f:5d:8c:
3b:4b:e9:dc:a8:11:af:39:d6:78:8f:bb:98:f2:1d:de:ab:c4:
d4:90:f5:ab:53:c1:4c:35:4f:37:2c:63:fc:86:b6:7c:30:ec:
4a:77:0f:71:df:e5:fd:6e:f8:62:fe:c7:60:e6:60:1a:32:a1:
c8:21:0b:3d:b6:6a:6d:25:b9:1b:51:3e:ba:a8:cb:67:a0:f7:
f0:1d:7b:52:a8:80:e7:bf:3e:1e:f9:e8:5a:75:10:33:81:8f:
8b:3e:bd:ba:d3:24:d5:f3:c2:ea:e1:e6:15:25:11:b9:c3:72:
ab:41:e3:86:7b:1c:5a:1e:8d:46:15:3d:c5:6d:ad:99:a3:da:
80:51:cc:17:89:1c:86:e0:82:3e:77:dc:a4:94:f1:16:ca:96:
fd:60:2f:fe:07:ec:00:25:bb:c2:a2:1b:ee:a0:88:df:20:15:
cb:8c:4f:73:55:19:b5:ec:f8:41:69:b1:40:e6:df:f1:c8:06:
4c:b0:57:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:28 2025 by rpki-client