Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0e81aa7d-d840-3792-ae95-caa770ed2acc.roa
File: 0e81aa7d-d840-3792-ae95-caa770ed2acc.roa (raw, json)
Hash identifier: whdfbHCTS2mgdBfe5OWe0tNIUyPaU0XSSNHs/2EJRlk=
Subject key identifier: 3B:D0:AE:4F:4E:BB:DF:7A:B1:5C:58:8A:A2:B1:63:C2:B4:FD:51:B1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134555ADA54D7A0B94D1F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0e81aa7d-d840-3792-ae95-caa770ed2acc.roa
Signing time: Sun 09 Mar 2025 10:20:57 +0000
ROA not before: Sun 09 Mar 2025 10:20:57 +0000
ROA not after: Sat 07 Jun 2025 10:20:57 +0000
asID: 36522
IP address blocks: 207.164.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:55:5a:da:54:d7:a0:b9:4d:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:57 2025 GMT
Not After : Jun 7 10:20:57 2025 GMT
Subject: CN=216c7893-7ad3-430a-85c0-a3bf80796a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:99:bf:ee:36:82:be:c1:32:fe:fa:b8:94:eb:
d1:e9:1e:87:c7:db:97:8d:8d:59:23:72:2f:2f:8a:
3f:8f:ff:20:cd:a2:2f:9b:50:a4:f4:02:63:06:ac:
07:79:2b:79:1f:bb:63:8d:09:54:74:5b:44:8b:73:
1e:4a:94:e7:de:cc:31:89:ad:36:f6:1b:72:8d:51:
f2:af:0b:7f:03:41:dd:09:a1:53:98:02:90:2c:e8:
87:5d:6d:2b:3e:27:54:48:2d:81:70:2f:6a:79:45:
c1:a8:5d:5a:69:e3:4f:a2:e9:6e:49:cc:11:bf:3f:
2d:66:ae:0d:eb:a1:b8:9a:ca:e2:8e:79:9d:15:6a:
85:1c:87:ce:e1:84:9c:28:ad:21:10:55:0c:e5:de:
3a:4b:99:23:3b:e9:42:ed:1d:98:b5:95:f8:f2:3c:
66:3c:1f:8a:fc:e6:6e:4c:4d:25:00:58:e1:1d:20:
ec:05:02:e0:8a:6f:90:8f:81:e8:45:e3:df:07:f2:
19:77:53:bd:e3:a0:f1:cd:a4:ad:7e:56:a3:ab:b3:
d4:c1:2b:dd:58:37:0a:5f:42:db:3d:21:04:94:c6:
d9:68:c4:7a:a3:3b:75:5a:7a:ae:d4:0f:6f:bd:0b:
fa:49:b5:b8:05:5b:d0:39:60:f9:af:32:66:5e:ed:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D0:AE:4F:4E:BB:DF:7A:B1:5C:58:8A:A2:B1:63:C2:B4:FD:51:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0e81aa7d-d840-3792-ae95-caa770ed2acc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:06:cb:b2:e7:fb:67:4b:14:79:a5:dd:d9:0a:f9:e7:5b:36:
94:22:e5:fd:98:52:10:6c:04:03:0f:29:4d:65:22:aa:77:ac:
b5:88:9c:c0:12:ed:3e:f0:60:f8:a5:33:76:6f:ed:b5:9a:bc:
c1:7c:d1:d1:bb:54:69:92:00:24:25:d6:96:4d:6e:83:cd:5f:
89:f7:a8:67:38:fc:38:b8:30:55:49:7e:d2:55:53:f4:77:57:
29:f2:27:90:ef:87:74:2c:cc:95:99:9f:2d:22:df:59:35:3b:
28:81:c6:68:e7:e8:58:58:1b:ea:24:12:37:bf:88:b4:86:68:
cf:af:cb:ca:0b:26:6f:f2:87:6f:f2:aa:30:16:2d:52:9e:33:
16:90:55:99:f4:2a:d6:16:ec:7d:a6:44:79:37:88:06:71:14:
80:cb:21:42:89:fc:69:f4:70:44:d7:a2:c1:76:b6:a3:d3:ed:
7f:78:17:96:b9:c7:f0:98:13:04:88:9f:4e:d0:d7:69:d8:b7:
c8:bc:8f:c0:d1:53:e7:9d:d3:e8:9f:50:cd:95:7f:3d:1c:a6:
35:cc:41:7b:95:b4:73:c1:59:8f:af:e8:a9:26:bf:84:3d:ba:
7c:ce:40:e8:f0:3d:9f:fc:6e:37:6f:4c:21:2c:15:3b:83:11:
96:5e:36:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:11:54 2025 by rpki-client