Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/240c4587-780d-3be8-87be-b52fad1e5cd8.roa
File: 240c4587-780d-3be8-87be-b52fad1e5cd8.roa (raw, json)
Hash identifier: 4L//j36DurBO38HwnlvQ3B0iUtLtAZf/z45pvB+hL4I=
Subject key identifier: A0:AA:A1:1D:ED:91:85:07:98:B5:36:E2:C0:48:36:10:BD:85:05:E0
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584840E55D6B29F6387BFD7ADB80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/240c4587-780d-3be8-87be-b52fad1e5cd8.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 32766
IP address blocks: 70.191.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:5d:6b:29:f6:38:7b:fd:7a:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=d1a7bd75-068b-4f04-9a86-437a52f0930c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:42:4c:51:af:ae:72:2c:e6:a6:49:41:78:
e9:56:0d:b0:39:7f:c3:c2:e7:66:2e:04:d9:74:80:
70:4a:19:da:9c:71:9a:eb:c7:88:54:c0:93:9a:75:
42:07:10:bb:e0:8a:9d:5b:43:31:96:58:f5:13:df:
78:7f:bd:04:73:4e:f4:f5:dd:99:20:d8:f4:06:b6:
49:7f:d7:5c:76:27:75:49:cb:67:b4:24:bc:73:ba:
06:53:40:66:9f:9e:2b:18:53:af:e4:6a:35:3c:6c:
06:88:81:9b:d3:c6:f2:be:9e:82:d9:84:3d:6d:7d:
6f:da:8b:95:1f:50:c5:20:16:ca:b3:57:95:43:cb:
3d:75:47:ac:3d:21:61:a4:21:50:a4:a7:b8:e6:0a:
df:78:60:a1:57:42:50:01:35:13:31:65:8c:13:9a:
44:ee:69:c1:64:2e:e2:86:ae:ec:5b:d8:39:27:e5:
76:32:06:e5:f4:8e:13:bf:fa:f5:3b:5b:66:3e:25:
47:3d:92:93:dd:ed:e9:0e:08:b8:9e:93:52:1b:7b:
68:87:16:91:05:97:a3:78:b3:ae:c8:6a:28:49:74:
1a:d2:d7:d4:02:62:e1:4a:36:63:88:9e:f5:34:ac:
fb:84:04:69:2d:92:44:dd:46:b3:05:36:93:82:2e:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AA:A1:1D:ED:91:85:07:98:B5:36:E2:C0:48:36:10:BD:85:05:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/240c4587-780d-3be8-87be-b52fad1e5cd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.191.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:db:7e:74:83:f5:b6:23:b5:5a:9e:3b:97:84:70:1c:0a:50:
ab:68:fa:fc:fa:94:63:99:34:98:1d:cc:b5:44:ee:f4:83:34:
41:9c:5d:bd:82:92:04:52:a2:02:08:bc:7e:58:58:e5:a9:12:
f2:e5:d1:34:08:b0:0f:96:e4:75:2c:5e:3d:5d:c4:ce:69:42:
15:15:8b:65:92:36:d6:8b:d1:2b:09:78:12:27:ee:47:11:b6:
2a:2d:95:4f:c1:33:40:69:57:88:27:f2:58:c6:fa:17:bb:d9:
b7:8b:90:b5:dd:cd:69:cc:c8:0f:87:09:75:3c:99:82:c3:06:
da:a6:e0:8e:98:6b:3b:11:4e:0d:17:6b:c0:5d:37:01:7f:33:
0d:cd:c5:6f:72:19:4f:02:bd:1a:95:2d:78:0a:b1:d2:e9:79:
b7:b9:92:cc:f6:69:08:54:fb:32:9d:0f:a4:2d:87:ac:f1:a2:
9a:bd:0b:e0:ce:6b:c5:5f:55:ae:a1:4f:6e:9a:6a:80:59:4e:
6e:2c:be:18:57:f7:e3:ec:e3:7e:1c:67:06:68:9a:bf:68:75:
22:ba:ba:f4:c2:97:16:4c:63:9e:26:b4:5e:18:33:57:c8:a8:
0a:12:78:af:bb:f6:21:57:91:7a:60:5a:a6:28:94:00:8e:eb:
5e:2b:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:33:26 2025 by rpki-client