Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f452ca2-2235-3900-8cea-73e6ab9b25ae.roa
File: 2f452ca2-2235-3900-8cea-73e6ab9b25ae.roa (raw, json)
Hash identifier: HTcI6j8LzRUNvev6bizfRor7gmr8h9NS//N1LsNqBYM=
Subject key identifier: 9C:FF:D8:3C:64:85:13:5E:F8:1F:CF:71:5E:32:AA:B6:F1:83:01:34
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B653A3A85F79B6CD78F320
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f452ca2-2235-3900-8cea-73e6ab9b25ae.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:53:a3:a8:5f:79:b6:cd:78:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=927ce664-6f47-4dc2-9b10-2002d829a4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:3f:f0:55:fb:48:c0:2b:37:0a:03:3d:36:
da:4e:0a:c4:8c:37:00:08:8b:49:94:99:0b:fc:e2:
6c:00:5f:8d:a5:83:37:8d:5a:11:41:89:6f:21:44:
30:a9:2b:51:e0:91:79:da:e5:a1:72:41:a3:60:66:
7b:c2:d8:d2:6d:9e:d9:ca:ac:df:01:c6:17:62:87:
6b:09:dc:4e:6f:8e:99:12:d5:b3:b2:b2:60:38:30:
fe:d5:eb:f3:20:e5:63:e2:0e:60:88:d6:05:1e:e2:
b7:4b:a2:eb:fe:9f:7f:d7:8c:15:6e:2f:e0:db:c0:
45:76:77:a3:8a:2d:50:96:d0:21:80:03:10:2e:bf:
7d:31:c4:7c:b8:79:02:3a:54:06:df:90:7b:a5:93:
65:a7:37:cb:77:00:52:ba:83:c7:af:74:07:c6:57:
a8:37:af:f0:50:57:c2:1d:e2:07:4a:d2:73:84:e0:
c7:0b:45:d3:ef:6b:b9:14:36:c5:cb:3e:da:ac:52:
97:7a:49:65:44:cb:58:b6:9a:a9:e3:ed:dd:62:74:
11:ed:91:01:c6:e0:ee:80:9c:91:6f:8d:6b:78:e5:
9f:b8:45:d4:7f:5e:fc:bf:01:1b:75:b8:81:5a:62:
9c:e6:3f:78:b1:73:88:8d:a1:ca:7e:79:76:87:64:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FF:D8:3C:64:85:13:5E:F8:1F:CF:71:5E:32:AA:B6:F1:83:01:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f452ca2-2235-3900-8cea-73e6ab9b25ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:e2:e0:b5:d6:cc:e9:af:c3:31:38:63:80:56:a6:5b:09:f6:
73:4c:38:d0:06:b5:63:99:1d:64:31:1d:f2:9c:92:bd:be:fb:
d9:74:e5:96:ec:23:c5:1f:e5:f9:ab:a4:ac:ef:1f:f1:3d:ca:
80:46:13:9d:29:36:d7:bf:39:01:31:dd:d1:8a:c0:46:8b:b7:
d7:94:ca:61:07:08:f8:69:6c:62:df:6f:3d:b5:41:2f:9e:66:
e8:18:7d:df:bf:65:60:a4:69:2b:0b:2b:c2:06:aa:14:e8:e9:
5d:6e:b7:7a:69:cf:74:db:9d:1c:b2:03:27:05:40:8d:0f:43:
8b:74:b6:a9:1e:4e:bc:21:d1:ec:15:87:39:df:7e:1d:aa:53:
fa:7e:29:44:9d:2f:92:d1:2e:2e:33:3c:b0:d3:fa:19:78:78:
72:c6:a8:4e:f7:55:a0:e6:ca:0b:3f:c2:75:04:5f:b9:92:55:
8d:b0:0a:33:10:00:52:c9:f7:6e:67:33:31:be:f1:af:22:7e:
e0:82:b4:4d:df:6b:d7:21:7f:01:4d:d5:a7:50:93:b9:71:d4:
1b:f1:94:c9:ed:27:ff:25:13:af:e8:4b:ca:64:9b:d4:f1:6c:
9e:2b:ee:ce:20:f9:bc:55:d9:7f:73:13:17:3a:84:39:b6:73:
b9:6f:e0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:26 2025 by rpki-client