Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d2b42b3-ab1b-3ee6-8cb8-075c5c07f913.roa
File: 2d2b42b3-ab1b-3ee6-8cb8-075c5c07f913.roa (raw, json)
Hash identifier: C+puSzSdxjUh3p6I5OKpMMG0VoNsvWU3FpSzmFMDKsA=
Subject key identifier: 48:77:21:7A:27:2D:8F:54:63:CB:47:70:E8:D7:9F:E0:18:3E:F9:8A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5A8C4FF6A2E698006ED00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d2b42b3-ab1b-3ee6-8cb8-075c5c07f913.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 174.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:a8:c4:ff:6a:2e:69:80:06:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=29680bc7-18a3-4249-a9dd-84364d40f3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:f1:02:08:04:7d:0c:b2:2c:86:ca:8b:13:
14:12:03:67:30:4b:d6:76:20:74:1e:e0:99:8a:50:
70:f2:a0:14:4b:d4:ca:34:97:0a:c2:2f:30:bc:e2:
98:6d:16:5d:f2:64:2e:7c:d0:b0:6d:29:db:02:de:
79:a3:28:75:ad:6c:3d:6d:9b:b4:84:97:47:c0:d4:
24:c0:03:cd:41:0a:f9:12:86:1c:49:e9:d8:1a:5a:
65:0a:29:b0:98:88:81:74:cb:42:6e:f6:e5:1d:c5:
50:c8:d6:47:3f:e4:29:49:9a:0e:97:42:dc:79:d7:
f9:7b:d5:f0:f2:76:bc:c1:f3:08:dc:84:7f:85:a1:
99:cf:cb:0d:15:66:d7:bd:ac:d7:95:fc:ce:4a:60:
39:0c:68:f1:27:55:cf:13:11:2d:3a:bb:52:2c:77:
e5:dc:c5:cf:0e:fa:0b:7b:46:e5:86:54:a8:6f:68:
fc:eb:13:1c:8a:0f:e4:1d:d2:3e:b6:19:70:c1:9c:
44:9b:7c:39:b2:65:44:33:3d:85:a7:88:bc:73:67:
c8:cf:34:13:3b:1b:e1:85:f9:d5:4d:ac:33:c2:07:
67:d1:1a:3e:9f:09:46:c4:ca:94:c2:a5:37:ad:12:
63:72:92:dd:67:18:68:1a:bc:13:00:02:fc:69:71:
6e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:21:7A:27:2D:8F:54:63:CB:47:70:E8:D7:9F:E0:18:3E:F9:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d2b42b3-ab1b-3ee6-8cb8-075c5c07f913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:6f:ed:a3:3c:fc:62:ac:00:50:d1:ee:6b:61:ea:d2:3a:19:
3a:dd:7b:a0:ff:b7:32:1c:8f:fb:f0:3f:d6:53:c3:65:b2:dd:
e1:2d:70:18:c9:b1:b1:56:f8:6d:90:77:5d:be:d1:fa:48:f2:
0c:fc:73:3b:4b:11:4e:c8:cd:86:30:bd:54:20:97:55:6c:1a:
d2:91:86:eb:a1:e8:95:2f:97:be:5b:88:46:cd:02:d5:85:b3:
e5:e3:b0:88:75:86:98:54:c1:8e:b8:45:72:0a:5e:66:89:65:
b8:78:fa:2c:b5:86:f5:94:97:0e:93:93:24:80:45:a2:e1:fd:
d6:ce:e9:7c:3a:41:78:17:c0:25:aa:4c:6a:b1:03:04:5c:11:
05:b6:92:37:e5:0f:37:39:c3:bc:d0:6a:be:44:ae:fa:2f:de:
a1:05:d1:76:f2:58:2e:d9:5d:ed:88:39:e5:86:c7:99:2b:14:
e6:18:43:0d:8c:c7:db:47:dc:d5:89:38:51:fe:55:3f:49:ec:
eb:7d:4d:71:03:7c:9d:02:e1:e3:4c:4d:40:d5:4e:94:ad:51:
8b:bb:c5:1b:55:8d:37:cd:0b:9e:fe:2c:00:bf:9a:12:ae:94:
c2:c9:3f:8f:88:36:5e:fd:c1:1a:09:da:65:c2:56:c9:9c:4a:
8c:a8:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:06 2025 by rpki-client