Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df76393d-c328-3287-99c9-a26dc9e9fb19.roa
File: df76393d-c328-3287-99c9-a26dc9e9fb19.roa (raw, json)
Hash identifier: CGqh2DGyV3YLLBhFt0N6FdV7MFoLAm/xenRA1piZwhQ=
Subject key identifier: 25:CB:30:B0:92:25:3E:58:2C:04:7E:46:E5:EC:0C:A8:0D:78:36:1F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B806FB00786C50F8C57880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df76393d-c328-3287-99c9-a26dc9e9fb19.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 15321
IP address blocks: 216.209.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b8:06:fb:00:78:6c:50:f8:c5:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=3ebcc71f-7520-4ff6-89d5-b49179b049b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:75:f2:b1:7f:1d:75:04:42:d1:f1:d4:cf:97:
b9:0c:6c:84:06:63:2a:f7:49:67:31:e0:4e:ba:ac:
cd:da:26:c7:22:e3:f3:d2:7b:95:5c:b1:85:f1:bd:
07:c6:4b:2c:b1:a0:21:01:86:f5:a7:82:ad:e7:69:
ee:5d:ff:16:eb:13:19:89:df:df:9b:8a:94:3b:f5:
2c:43:41:09:34:5c:a4:97:e9:94:f4:0e:30:4a:be:
0e:d2:a0:d6:7b:7b:9e:9e:a7:9e:5a:71:38:fd:04:
24:13:4b:4d:5c:95:46:05:cc:33:f7:f4:05:05:e4:
90:11:78:a7:1d:98:61:c9:6a:e4:69:73:f0:fc:0d:
04:73:d9:46:7c:c9:9c:0e:37:40:74:45:74:f7:88:
60:a7:ca:36:26:79:a2:d5:57:f3:d0:71:4a:4e:a5:
e5:7b:7a:c6:2b:cf:08:65:ba:b2:99:a5:03:fc:38:
9d:84:26:d7:d6:46:60:0e:ab:31:32:6f:a2:5a:50:
af:52:9e:2d:16:76:8a:87:7b:f9:31:c5:ab:1f:77:
05:1b:52:42:db:0b:bf:19:8d:ed:7a:91:d1:90:e4:
28:d9:f9:e7:4e:6e:64:ce:33:c7:82:fa:3a:77:96:
83:8c:1d:8a:ef:c0:fe:34:c6:5f:68:ab:bb:a7:cf:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:30:B0:92:25:3E:58:2C:04:7E:46:E5:EC:0C:A8:0D:78:36:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df76393d-c328-3287-99c9-a26dc9e9fb19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:de:90:83:2d:37:a5:54:f0:18:cb:7c:c0:05:22:30:3d:9e:
a8:b3:e5:d3:e7:42:23:a0:dd:fd:6d:a2:98:47:72:fb:36:d5:
f4:f4:84:30:65:b4:54:73:1e:66:0e:a9:9a:ce:e0:64:c6:ac:
9d:be:54:08:b7:ee:e5:ba:09:66:22:5e:ed:84:a1:c2:57:d2:
c9:f3:60:69:2c:8d:ea:78:0f:b5:b0:b4:cd:16:63:8c:5a:4a:
8a:5a:23:dd:76:ec:4a:a6:e6:9b:ff:21:90:6b:f0:6e:d8:43:
28:d4:23:a4:63:8b:5b:2a:e3:16:c3:eb:a7:6e:26:a7:da:0b:
6e:94:ae:c7:e6:1b:45:63:b4:7f:7a:16:7b:7a:a9:69:48:c8:
54:95:35:28:e1:79:b8:c9:31:ed:cd:39:ac:85:6b:a4:79:dc:
90:a6:d7:d9:7a:04:5f:43:f0:83:12:df:32:1c:9b:72:75:76:
ee:9d:86:e2:63:80:a2:5e:c8:ce:b1:20:ef:3a:38:38:6c:77:
bb:a1:31:50:90:5f:21:0d:29:0a:d8:ac:60:ed:ff:43:c5:c5:
1a:54:74:7c:5d:93:13:2d:91:f9:85:0e:0c:46:01:df:45:58:
7a:b2:7f:54:8a:54:16:b1:d0:0c:cd:bd:e9:59:5d:89:19:11:
69:58:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:40 2025 by rpki-client