Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/22deac1c-1bbd-3dd2-a475-ad60fd202cea.roa
File: 22deac1c-1bbd-3dd2-a475-ad60fd202cea.roa (raw, json)
Hash identifier: BqQKfVyY4td2L75gUCf+ruwKH/JS2lEIP/7bQFmo03c=
Subject key identifier: D5:8A:CE:AB:C5:F1:04:51:31:6F:81:30:7D:64:D2:5A:1D:C1:3C:AD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921342DDCACB35A528718EC80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/22deac1c-1bbd-3dd2-a475-ad60fd202cea.roa
Signing time: Sun 09 Mar 2025 10:20:38 +0000
ROA not before: Sun 09 Mar 2025 10:20:38 +0000
ROA not after: Sat 07 Jun 2025 10:20:38 +0000
asID: 577
IP address blocks: 70.53.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:2d:dc:ac:b3:5a:52:87:18:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:38 2025 GMT
Not After : Jun 7 10:20:38 2025 GMT
Subject: CN=4c71a3c7-4162-486f-b893-1d816f37d12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:cd:5c:21:1c:04:ef:50:ab:00:07:de:1e:
5c:13:f4:14:33:3d:af:05:ab:a2:a6:48:6c:4d:78:
87:f1:92:0a:c8:ca:ea:ae:51:64:6f:56:27:d4:99:
5b:47:7e:33:bb:11:b4:bf:79:5f:00:8c:84:a9:13:
76:ad:e9:2b:5a:9e:4d:cb:7a:2d:dc:9b:de:61:6b:
18:60:e1:d0:f1:d9:fc:bf:17:ad:f2:f2:58:2d:42:
de:45:af:76:ce:67:d4:cd:2b:1d:db:f3:46:15:76:
5c:91:0f:a8:43:eb:36:07:68:b2:a2:97:de:bd:2e:
1a:ab:5f:5a:0a:a7:83:20:27:f1:a5:69:32:6d:7b:
ac:52:56:c1:6b:86:99:c3:42:13:f3:f8:25:b8:fb:
ac:24:f6:b6:31:33:35:47:b2:7f:76:8c:c7:d9:80:
4e:47:98:2b:07:a9:6a:9c:e0:bc:65:d7:91:c6:db:
c2:d3:d0:e3:ab:cb:d8:bb:62:43:ab:3a:6a:13:59:
44:c7:c2:f0:e8:9a:7d:49:09:10:0c:14:d4:97:f0:
a8:99:bd:89:1c:cc:a8:10:e5:88:08:ba:d0:a3:64:
c9:0a:82:b4:02:4d:2e:fd:04:21:7f:43:3d:d6:27:
f4:9e:be:14:f3:1a:7d:e8:63:5e:54:6f:f1:4a:f1:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8A:CE:AB:C5:F1:04:51:31:6F:81:30:7D:64:D2:5A:1D:C1:3C:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/22deac1c-1bbd-3dd2-a475-ad60fd202cea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.53.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:3e:44:d6:e3:05:2c:46:a0:00:44:f5:61:dc:a4:b3:b7:13:
c0:11:0a:5a:60:8d:ed:68:ec:63:06:67:ef:ad:6e:03:a5:1a:
f1:1d:b7:66:d1:c9:95:95:76:04:63:35:84:27:40:cc:b4:ac:
63:60:09:06:aa:b5:d4:21:ca:0a:d1:09:9d:c5:e1:4f:b3:4e:
55:84:00:b4:8a:2f:a8:66:b3:62:e2:ba:f5:2b:23:01:de:93:
88:fe:15:1a:d6:53:7f:d7:05:01:4a:5e:00:ee:82:cb:3f:82:
1e:00:a0:58:ff:b7:8a:9b:b4:86:20:0f:5a:97:ff:e7:75:e3:
be:05:cb:2f:ed:f8:e4:b5:3c:2f:5f:dc:d5:fd:ee:57:ca:4b:
a6:32:7f:b9:45:a3:5a:b9:ab:d6:cf:0a:5d:fb:db:63:23:5a:
4b:63:bb:83:45:a6:72:09:55:52:1a:a5:a6:ca:f2:4e:e2:9f:
6a:e2:0d:35:ff:07:b5:47:9f:cb:ca:56:e4:9e:00:6f:b8:c6:
aa:96:92:a6:fa:c6:de:78:2a:33:a3:95:1a:12:47:c7:9c:5b:
66:40:2d:28:61:bc:52:97:43:70:c9:ce:b8:0d:59:bb:6d:8b:
55:ae:3f:0b:24:a9:d7:38:6f:65:c0:63:4b:d7:c2:ff:24:3b:
04:06:08:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:53 2025 by rpki-client