Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e1c8817-1d38-37ce-a66c-9c910d939186.roa
File: 1e1c8817-1d38-37ce-a66c-9c910d939186.roa (raw, json)
Hash identifier: azOQMjehQhIwhPhuZ699g1rnjDNb6/S72z3J8gIoGS0=
Subject key identifier: 99:BA:2A:8D:FA:BB:AF:97:32:E8:15:08:C1:11:63:6D:1A:5D:4E:75
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134458B829B9B20BC95FAA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e1c8817-1d38-37ce-a66c-9c910d939186.roa
Signing time: Sun 09 Mar 2025 10:20:49 +0000
ROA not before: Sun 09 Mar 2025 10:20:49 +0000
ROA not after: Sat 07 Jun 2025 10:20:49 +0000
asID: 46872
IP address blocks: 204.101.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:45:8b:82:9b:9b:20:bc:95:fa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:49 2025 GMT
Not After : Jun 7 10:20:49 2025 GMT
Subject: CN=795b774c-36d2-4898-89c4-bb2f2473d8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:fa:99:f3:0e:1a:8c:a5:b0:f7:60:f0:5c:
da:ff:ad:5a:1d:ae:12:91:ee:4a:7f:4e:cc:9b:09:
a0:78:dd:6a:4d:9c:43:02:b3:ba:db:7f:d9:e7:6f:
7c:d1:fd:a7:5a:ab:cb:4c:9f:cc:aa:d9:b4:fc:d9:
a4:fd:7a:b6:13:7b:93:80:a8:4c:43:d9:81:70:29:
36:0b:64:03:27:61:47:e3:2a:bb:b8:3b:0b:db:91:
ea:62:33:76:96:6a:21:15:1b:96:61:d8:b6:7c:b4:
c3:c8:e3:22:63:cc:44:4b:dd:3e:64:70:94:df:d6:
20:33:12:ac:46:4d:ab:68:f5:ad:78:2d:86:fc:e1:
22:30:6d:0b:4c:1d:f7:78:2b:41:8c:eb:ac:43:37:
36:5a:55:fb:c7:12:fa:89:5c:19:cb:9d:3f:a1:7d:
43:45:a7:9a:01:5b:70:35:11:ef:2c:fe:dc:b7:29:
66:c0:e2:db:7f:35:be:21:0c:35:df:20:ae:57:9a:
77:a7:a9:a0:8a:99:13:20:f5:c5:ba:10:04:10:34:
d5:9e:b3:44:e0:bb:35:10:00:d1:c2:ad:d5:9e:93:
c6:b2:94:0b:7d:81:6b:bd:17:f5:58:30:83:32:23:
f3:80:40:9f:f1:cd:ab:32:45:b6:9d:9c:a4:65:c0:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:2A:8D:FA:BB:AF:97:32:E8:15:08:C1:11:63:6D:1A:5D:4E:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e1c8817-1d38-37ce-a66c-9c910d939186.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:06:98:9f:1d:27:63:22:3b:b0:c8:1f:eb:e2:e0:48:ee:30:
8d:07:f6:e9:62:f7:8e:45:7b:71:d8:1f:f8:8c:e7:3d:92:d7:
c3:64:b8:f8:64:8f:3e:7d:4b:22:b0:01:0f:15:da:b3:f4:28:
31:7b:e5:ce:98:4d:08:05:1d:54:7c:4a:92:43:49:d5:58:82:
7d:18:b8:8f:96:04:4f:d1:8e:fd:76:36:6d:21:4e:f3:96:a1:
e8:ca:a7:6f:34:f6:de:d6:57:a9:86:d3:52:26:6c:84:05:f3:
35:74:bd:29:67:af:ef:2f:05:49:03:8a:a0:f3:d1:be:2e:4b:
7b:89:62:48:68:25:60:a1:60:be:ff:1b:6f:4e:44:0b:74:58:
e1:76:7e:5f:89:fc:d2:bc:0a:1d:75:7c:32:23:03:ea:07:f5:
24:fe:68:a4:7c:ca:ca:9c:cc:3a:ac:26:15:7e:da:5c:f0:5b:
b6:f2:b8:09:f7:f3:e9:43:3d:9c:af:9a:f8:23:72:8b:6e:f9:
94:ae:b4:1d:da:0b:15:17:f5:93:8f:bf:cc:56:31:49:60:d7:
9c:0c:dc:49:6c:73:48:4a:b3:23:c3:77:f5:79:56:22:92:fa:
42:d2:36:6f:90:47:58:7c:90:ec:27:0c:39:c7:ac:97:77:d8:
e2:f4:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:51 2025 by rpki-client