Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b3d96a3-204f-3300-bbaf-a44e0e170af2.roa
File: 3b3d96a3-204f-3300-bbaf-a44e0e170af2.roa (raw, json)
Hash identifier: VobkbfpQsWbYN8QOVniBylKvpIz1re8k+fXGxAwIrU0=
Subject key identifier: C2:51:FA:AA:C4:6D:23:F4:BB:5D:43:97:DD:59:53:4B:7C:3B:FB:95
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B57032396476E151090840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b3d96a3-204f-3300-bbaf-a44e0e170af2.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 142.115.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:70:32:39:64:76:e1:51:09:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=dde12774-43c5-433c-8709-5f4cb19b4dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:52:41:25:55:a0:c5:c9:ea:a8:75:fe:03:f4:
1e:50:0e:cd:2e:a7:67:e2:90:79:bb:7c:94:f5:f1:
8d:a5:51:92:76:8b:97:48:4c:57:63:32:76:5a:31:
fb:4d:8a:e4:46:3c:dd:75:ce:24:00:ec:1c:ff:26:
6b:2f:bc:b1:d5:38:fa:6b:43:a0:5e:0f:dd:06:62:
5d:c6:6a:09:cb:be:23:10:83:22:32:10:a2:ee:8d:
aa:a5:c9:1e:fa:95:4f:cf:c1:09:f8:4e:89:35:db:
c1:d7:67:21:3e:8b:fb:15:57:c8:be:36:89:62:8c:
7d:b1:41:ba:b6:18:35:5f:ae:aa:80:47:f6:95:a5:
2a:af:ae:8d:d7:34:a7:31:52:c6:55:94:28:c4:43:
59:a4:4a:ee:c3:06:87:ff:a3:a0:88:a4:27:ec:05:
1c:fd:17:21:04:10:a7:47:60:f5:0a:65:90:86:7d:
2f:46:2d:02:20:66:56:1d:8f:89:40:85:96:6a:50:
6e:b5:07:11:54:86:b3:d6:17:b9:50:b8:13:aa:82:
e3:d9:d1:98:27:fa:07:23:15:30:51:e6:31:de:42:
ba:58:28:bc:a4:69:7f:c7:72:30:55:43:bd:63:a3:
b1:3a:a8:9c:63:90:a9:e0:48:16:05:dd:cc:8c:cf:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:51:FA:AA:C4:6D:23:F4:BB:5D:43:97:DD:59:53:4B:7C:3B:FB:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b3d96a3-204f-3300-bbaf-a44e0e170af2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.115.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:8b:94:27:e1:97:e1:cf:1e:cb:65:79:12:34:07:95:f2:82:
5b:f0:0a:df:05:80:86:2b:cb:34:d1:9e:9a:fa:0d:81:51:fc:
8c:33:54:bb:aa:d6:3f:98:29:ad:f1:c3:28:89:26:40:98:98:
9a:a4:40:6c:39:d5:c9:7f:ea:0c:02:00:69:6e:57:2b:ce:f8:
47:67:69:1d:29:8c:a9:b8:61:e4:12:66:f6:a0:34:49:40:98:
9d:0d:58:12:74:8c:1f:9c:ad:5f:37:4d:8c:f6:91:0f:0b:67:
b2:cd:e4:d4:f6:26:4b:25:69:93:0b:c3:ee:76:aa:7c:3b:88:
0f:33:d9:c1:8e:6c:fe:c3:5e:8d:bb:af:1f:b5:54:01:e0:74:
ca:b5:59:7e:3c:64:dd:bf:40:b5:36:05:48:17:51:e1:af:55:
84:f4:24:0e:73:cd:85:af:85:33:73:c8:6e:77:e7:5c:54:df:
18:10:14:1b:28:04:6d:e8:b2:9b:b2:b0:63:2b:3f:e4:04:5a:
b9:51:1c:5a:99:84:df:e8:d7:bf:55:e6:12:1e:aa:07:7f:5f:
19:9f:a3:6e:68:4c:bb:28:66:53:36:ee:0d:67:85:09:79:4f:
d0:86:68:5e:68:9f:f1:22:30:f9:34:45:f1:ee:44:3b:b7:c9:
7b:c3:7b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:13 2025 by rpki-client