Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0356a2f5-eefe-3c98-b1ec-6a1029d3a268.roa
File: 0356a2f5-eefe-3c98-b1ec-6a1029d3a268.roa (raw, json)
Hash identifier: 4nVTS51jjXXqqPiJajB0eNi1s4vmXJboe3L8LVW0XyI=
Subject key identifier: 5D:AF:F3:E8:2E:C1:04:88:18:39:84:3C:F3:F3:D0:D2:DD:DE:4A:62
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5873DE2C7A14379AB04D0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0356a2f5-eefe-3c98-b1ec-6a1029d3a268.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 7122
IP address blocks: 142.160.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:87:3d:e2:c7:a1:43:79:ab:04:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=76c6070e-fc74-4421-9ff4-5b02a540eb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:8f:b1:bc:17:6e:da:b7:7f:75:0f:92:c9:
75:b0:24:42:ff:e6:16:b3:12:f4:b7:71:01:31:3f:
84:1a:79:05:4e:1d:e3:23:07:53:a5:12:d6:82:58:
22:dd:98:95:8d:85:83:25:e5:28:a3:2f:c3:24:57:
79:16:bf:4f:d1:6e:ed:09:e0:ca:cb:7b:72:0b:09:
b2:f3:88:ce:00:ad:2a:37:b4:d1:42:e3:d4:9d:04:
3e:c9:d8:99:b0:19:6b:a8:b4:61:0a:4e:a6:92:5a:
e8:f1:36:5c:64:d3:4c:5b:8f:a6:a5:29:6c:38:59:
5d:fe:6f:44:4b:3f:db:b6:8e:ab:01:55:a6:f1:3d:
2a:5c:19:95:fa:4d:16:3f:8a:62:29:cf:b0:47:fc:
9e:52:29:9c:72:55:83:83:2a:2a:a8:8e:6c:0e:fd:
23:90:ca:55:a6:63:ef:ee:d1:fc:55:fb:4d:a3:55:
d1:59:08:19:60:0a:9a:e3:e0:35:60:a3:ad:91:68:
e0:bf:33:5e:36:5a:a5:46:e1:cd:cb:bc:cf:3d:ea:
c9:f9:15:55:f0:ba:e0:ed:30:b7:1a:a7:78:cf:c0:
1e:b3:07:41:e5:aa:f8:58:09:89:17:9b:29:f8:f2:
dc:83:6e:a2:85:36:5c:71:f4:02:6c:03:80:5d:0a:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AF:F3:E8:2E:C1:04:88:18:39:84:3C:F3:F3:D0:D2:DD:DE:4A:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0356a2f5-eefe-3c98-b1ec-6a1029d3a268.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:ba:20:d2:c8:8c:89:af:d3:74:7d:0a:f7:85:13:4d:e4:85:
ff:a9:7d:3a:3f:a3:6c:cd:dd:d7:38:e0:38:4c:3a:75:20:c0:
ce:44:a6:d3:d1:8b:ec:12:cf:be:09:f6:c9:f1:99:86:d2:5d:
5c:36:a1:7b:0f:ab:c1:6b:ac:fa:d3:f9:1d:ad:ec:08:eb:5e:
2a:33:57:3b:f9:a9:f4:39:1c:48:f0:68:65:21:d0:01:4b:cf:
f8:5e:cc:72:12:31:80:65:e5:1a:d6:45:87:ed:a6:d5:93:22:
08:21:27:f7:a0:09:96:a5:cc:9f:4c:94:bc:b2:91:0f:b8:60:
d1:56:29:ac:ab:47:8d:1b:f2:fd:f4:e4:8f:cf:d3:c0:e6:d4:
5d:9e:65:c7:0f:55:e6:4e:f3:ca:9d:fd:f0:9b:74:b8:17:72:
0c:0f:18:4f:f0:03:93:31:91:47:86:6d:ba:ac:49:e7:a8:28:
27:b2:5b:e5:a9:f4:de:1b:40:f5:bf:f9:e0:b1:a2:b7:c3:28:
fe:5b:d8:20:24:8b:e3:02:47:84:30:29:57:32:1c:ba:5a:1d:
38:76:80:2d:44:bf:c8:23:5e:87:67:51:9f:ec:83:d9:44:0f:
b5:97:8e:37:8c:12:69:89:47:ea:45:cc:65:8f:db:b0:32:93:
25:98:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:27 2025 by rpki-client