Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/c481b471-d019-386a-9eb3-32cbcff9f93e.roa
File: c481b471-d019-386a-9eb3-32cbcff9f93e.roa (raw, json)
Hash identifier: BygRM6DDy/yAErhQ9xP4PSbDoilXa0FD7eLhsqf6vsE=
Subject key identifier: 9D:E8:A7:10:A5:49:15:2E:91:A9:32:32:C1:DA:89:5A:03:6C:8D:64
Certificate issuer: /CN=1931273b-f68a-4770-b714-cad22762621f
Certificate serial: 010D0C9F4328584957F4161C9328168B7EB9C280
Authority key identifier: F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/c481b471-d019-386a-9eb3-32cbcff9f93e.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 945
IP address blocks: 206.168.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:16:1c:93:28:16:8b:7e:b9:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1931273b-f68a-4770-b714-cad22762621f
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=35cd491c-8063-466d-94b3-bd1bddb7f079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:90:7d:81:e7:ae:b3:c0:68:5f:64:6c:03:
6f:68:60:5a:53:ea:ce:32:ab:1d:0a:2f:32:2d:df:
15:a4:f7:02:64:59:7c:52:eb:21:c5:b1:01:ce:46:
29:e8:77:a9:2d:b3:59:9e:71:12:ee:40:3c:5a:a6:
2a:69:30:b8:40:e7:81:16:78:e8:54:68:85:ad:2e:
7e:03:6f:c8:b1:cd:96:4f:c2:70:16:36:cd:5d:d3:
8b:9b:ce:68:1b:b8:69:d3:36:a0:d5:bc:bb:bc:b1:
59:a3:3d:63:0c:1e:d0:ba:fc:ec:c1:f4:46:3a:ce:
94:8d:ea:73:91:04:70:81:bb:02:6b:b6:d8:ee:22:
fd:ca:3f:62:4a:95:3a:ed:87:48:61:9b:af:d1:d3:
4a:52:9d:92:a5:99:89:a6:fd:dd:d9:2b:7c:63:55:
0b:4a:88:18:6c:00:03:e8:b9:bd:09:b8:53:b5:5e:
79:22:e9:8f:02:f1:8c:a9:70:03:5f:9b:e8:7d:bb:
22:c4:32:34:8a:08:1b:ad:c5:b5:55:d8:23:ed:e3:
c8:45:20:21:e2:56:22:a3:3d:6d:40:bf:e8:9f:e7:
f5:6c:e0:ed:6d:51:3c:28:8c:92:77:a8:00:a4:c1:
ad:2d:72:96:35:fe:83:a8:10:2c:1a:58:6d:e7:c3:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E8:A7:10:A5:49:15:2E:91:A9:32:32:C1:DA:89:5A:03:6C:8D:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/c481b471-d019-386a-9eb3-32cbcff9f93e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl
X509v3 Authority Key Identifier:
keyid:F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:46:d3:cb:0c:7a:bf:61:f7:cb:06:98:f8:70:6b:42:ce:04:
5b:4a:13:91:f6:5d:e6:a6:02:93:2d:47:44:f4:49:00:ee:7f:
f2:ec:b3:a2:51:22:ea:ea:49:96:c9:a7:15:c1:5d:d1:e9:d0:
87:21:4e:9b:70:51:6d:c2:8f:36:ae:fe:ec:50:60:55:02:e6:
4f:1c:dc:73:d6:51:0b:fd:85:b6:85:17:73:8c:eb:23:fe:18:
a8:15:85:32:9d:38:b7:2b:65:b3:01:e7:c3:f4:a8:24:a2:e5:
1c:ef:49:3b:05:3b:16:02:c8:fe:fa:75:39:62:a6:f4:56:a8:
06:20:92:51:1b:61:00:b5:d7:c1:4e:f2:b6:95:73:01:b1:d3:
87:67:4e:d4:a7:65:4b:50:33:b6:5e:f4:f6:b1:8d:34:c1:e8:
6f:0b:a4:fd:15:84:e5:c7:10:c3:9c:25:f8:a4:8a:a0:9f:24:
de:26:f3:e4:96:24:74:0e:02:81:5d:e9:c7:dc:b3:8b:26:31:
8d:ee:5e:a8:4a:14:44:58:8f:d0:8d:8d:e9:f3:f7:62:ac:a1:
ae:8e:28:19:1e:5e:7f:92:c0:66:64:93:ff:83:22:a3:b2:40:
da:2e:ad:e0:d9:8f:7e:f9:74:1a:86:b8:47:3e:7b:f6:b1:54:
d3:17:bb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:48:57 2025 by rpki-client