Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1af27bb3-f331-397e-a1c7-5f82fda87392.roa
File: 1af27bb3-f331-397e-a1c7-5f82fda87392.roa (raw, json)
Hash identifier: YCC/QePs8JgoVwxzCVGncxAbUQRI/NOn/CunU754tmU=
Subject key identifier: 14:61:6F:FF:2D:1A:F0:80:18:24:54:94:B6:E7:77:09:BF:3C:D4:FD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213454B0153A7D8EE3178080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1af27bb3-f331-397e-a1c7-5f82fda87392.roa
Signing time: Sun 09 Mar 2025 10:20:56 +0000
ROA not before: Sun 09 Mar 2025 10:20:56 +0000
ROA not after: Sat 07 Jun 2025 10:20:56 +0000
asID: 36522
IP address blocks: 207.164.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:54:b0:15:3a:7d:8e:e3:17:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:56 2025 GMT
Not After : Jun 7 10:20:56 2025 GMT
Subject: CN=fc3595a4-b661-4906-8cea-ce80f354b334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:6d:1f:dc:df:4c:19:e3:72:0c:75:eb:f2:
ec:91:e9:d1:43:ed:fa:19:ac:0f:cf:5b:4f:c3:bd:
34:e4:ab:27:24:b0:db:60:45:85:05:96:ab:6e:e6:
db:65:d3:9e:96:77:ec:40:6c:a5:84:b2:2a:b0:9d:
f5:da:fa:05:15:8b:94:c4:a0:fe:9f:3f:c1:f2:2d:
1c:21:73:8c:c5:61:84:0c:ff:44:6b:c7:ff:53:5a:
37:11:32:66:f0:4c:34:4d:a2:63:90:da:43:de:12:
cb:ff:bd:77:9d:60:61:5c:9f:4c:77:50:8c:7d:0f:
15:2d:a4:51:cd:03:fa:5b:3d:33:1c:c3:09:9a:1f:
49:18:75:05:4e:ea:06:5b:0f:df:23:c5:b3:a7:ad:
6f:cb:e8:53:8a:3e:96:d8:a4:74:48:83:c7:f8:9d:
70:cf:77:f1:cb:90:d8:3a:04:0e:e4:28:a5:8e:de:
86:a5:f0:ee:ad:d5:80:75:90:83:f5:02:b7:e6:1b:
5c:a5:58:83:eb:ae:f0:84:d7:c8:c5:02:5f:e5:66:
56:78:e7:46:ac:86:94:43:2e:57:5d:13:6d:ca:9b:
6f:93:ab:e2:49:e4:8c:f6:a7:32:14:e0:c7:73:96:
ec:bf:b2:d0:e8:23:ab:b4:10:9a:03:8c:ba:6f:6c:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:61:6F:FF:2D:1A:F0:80:18:24:54:94:B6:E7:77:09:BF:3C:D4:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1af27bb3-f331-397e-a1c7-5f82fda87392.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:11:27:6e:84:b9:c2:57:bc:f4:c3:b7:18:63:2a:01:ee:0e:
0a:1e:00:62:51:a1:ce:b9:09:bb:97:3d:36:48:d4:1e:fd:18:
aa:0d:9f:55:0c:2e:ba:ed:71:b5:51:13:55:7f:b5:64:b9:cd:
43:f4:89:b4:bc:81:28:e1:d4:ab:9f:45:e4:53:c7:19:24:fd:
85:57:4c:c0:6a:b1:5b:91:c7:1d:e9:7e:dd:14:02:e9:20:55:
10:2e:52:bf:c8:74:90:ea:a6:da:bd:e5:26:a9:d2:24:44:4c:
25:bf:b1:a8:0a:6a:bf:0c:2c:57:9a:26:29:2f:53:65:4a:fa:
b5:4b:ad:4f:50:e8:f1:39:da:75:24:ba:98:7b:d2:c6:e3:ff:
dd:ed:e5:7a:dd:d6:69:34:43:f2:ee:47:2c:3e:eb:97:f7:3f:
f1:9c:b9:2c:59:d0:52:be:33:d6:03:8d:cf:bd:fa:2a:e6:49:
4d:a4:fe:16:18:b1:3f:dd:fe:8d:38:9c:4c:a8:0a:e6:17:f6:
f3:df:c5:f1:07:9b:d2:92:7a:65:a1:a6:41:82:c7:e5:54:4e:
4c:cb:3b:9a:e8:9a:57:3e:f1:7f:3b:cf:89:e4:94:fa:af:88:
77:f1:b2:b2:b5:a2:91:05:7e:7a:04:45:e5:79:0b:be:df:a0:
eb:6f:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:47 2025 by rpki-client