Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5a8d6b7-eb4d-3538-9157-7f36b2056c4b.roa
File: b5a8d6b7-eb4d-3538-9157-7f36b2056c4b.roa (raw, json)
Hash identifier: ARwa1/4u82IGhBBtLw9lB9x643ptzSfQCTdWb6yjQt4=
Subject key identifier: 61:05:EF:77:3E:9B:04:33:45:4F:74:7C:65:AF:BF:8A:C8:05:AF:6E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B779EA67999C5E2B2B7480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5a8d6b7-eb4d-3538-9157-7f36b2056c4b.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 209.71.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:79:ea:67:99:9c:5e:2b:2b:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=6d9f2e49-aa51-4b49-93dc-c7edd57c2751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:33:b0:5b:e8:fa:7d:b4:d4:1d:00:a8:12:
20:d6:9c:79:d5:0b:2c:01:7c:a8:26:34:ee:3f:52:
cd:21:d4:10:98:17:73:5f:ba:9f:33:29:70:1a:cb:
00:25:b4:07:34:a8:c8:ef:59:48:1f:18:5f:45:6e:
51:6b:1c:41:df:04:4d:b1:a2:bf:23:27:a5:18:a3:
5d:47:24:d7:0c:52:79:1d:08:a5:8f:fc:29:f5:1f:
94:2a:52:7a:78:f1:d3:74:ea:fd:1e:3e:9e:5b:fd:
4b:7f:60:a9:e4:0f:21:a5:93:ef:3b:1e:f3:68:c6:
92:c4:37:06:0d:7c:1e:b2:e6:a9:21:67:87:d3:39:
b3:44:37:4c:cd:4d:54:5c:03:49:c7:fe:b7:f4:12:
ba:d0:c5:fc:7a:f9:08:a9:95:11:26:2a:c8:93:e3:
5b:bc:8b:ce:43:f6:da:c7:da:47:74:0c:4a:dd:78:
b2:79:3a:4c:26:67:c4:9d:e2:43:30:33:ef:30:1e:
e2:0b:68:f0:de:0f:03:64:7d:8c:d9:ba:4f:29:56:
5c:ca:2f:fd:fc:be:de:d0:70:28:30:59:76:c5:31:
a2:90:a0:e4:25:68:82:a2:3e:b3:46:86:ef:04:b5:
1f:e0:86:a3:e3:df:64:18:4e:c8:d0:9e:0d:08:9f:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:05:EF:77:3E:9B:04:33:45:4F:74:7C:65:AF:BF:8A:C8:05:AF:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5a8d6b7-eb4d-3538-9157-7f36b2056c4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:60:b8:50:33:72:1b:4e:3b:4b:7f:a4:9e:fe:2a:04:44:8e:
03:be:90:c2:95:e4:cf:68:0f:21:a7:8e:96:c7:71:b5:03:da:
bd:98:25:6d:1a:c9:c1:1f:71:75:b5:b7:28:1f:36:50:49:e9:
d3:f6:fd:a0:f2:87:3d:3f:ef:bf:8b:65:4d:95:d0:2c:d2:60:
9c:f1:19:1b:67:4b:66:b4:bd:6a:c9:fa:b5:cb:31:2c:6d:8f:
28:e8:d1:8f:db:5e:86:62:5b:f2:f7:7a:53:d4:d8:dc:9b:5f:
c5:1e:2f:bf:3a:46:75:08:5f:85:b4:e4:86:67:18:cd:72:72:
00:10:70:00:b0:f0:fb:80:ab:30:75:0d:54:4b:44:0b:65:2e:
dc:0b:7e:be:b8:af:a5:3e:c7:93:ce:e3:b8:42:46:02:82:de:
04:98:fb:05:6b:ce:90:c6:a0:a0:ca:f5:57:76:09:af:37:c2:
71:90:41:d0:df:17:94:bb:07:b0:f6:e2:17:75:15:5f:92:5e:
52:12:62:36:ee:e3:23:88:77:17:55:98:22:b8:a6:ba:05:91:
e5:06:1b:4b:b2:a7:e7:ad:31:e8:a0:ca:ea:ba:81:ae:34:03:
3d:c2:62:fe:55:54:9f:f5:6b:95:8b:d2:dd:c3:63:a4:16:1a:
39:46:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:07 2025 by rpki-client