Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b51e924-6c6c-3ca0-a6f4-b6984e702b4f.roa
File: 3b51e924-6c6c-3ca0-a6f4-b6984e702b4f.roa (raw, json)
Hash identifier: gAcQRdM5sLJT7mLDTCmFqBYNd2rBCMsuwc3rfFUjdmw=
Subject key identifier: E8:41:DE:84:C1:DB:BA:56:B7:E7:1F:34:35:81:77:16:8B:AF:66:1E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213450ACD0656FEDA71C7880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b51e924-6c6c-3ca0-a6f4-b6984e702b4f.roa
Signing time: Sun 09 Mar 2025 10:20:55 +0000
ROA not before: Sun 09 Mar 2025 10:20:55 +0000
ROA not after: Sat 07 Jun 2025 10:20:55 +0000
asID: 21723
IP address blocks: 207.35.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:50:ac:d0:65:6f:ed:a7:1c:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:55 2025 GMT
Not After : Jun 7 10:20:55 2025 GMT
Subject: CN=1957d7d2-ff91-47aa-94f2-8c226af53f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:70:b0:be:12:42:33:51:d2:43:48:bb:71:
27:2f:3e:fe:5e:1e:a6:66:ce:94:e4:fb:d1:f6:04:
a4:68:63:59:9a:cb:89:8f:05:7a:61:d7:fe:19:1f:
07:b0:00:85:c9:43:75:77:61:24:cf:6f:6a:97:6b:
bc:57:20:24:a0:cd:93:a5:59:7a:52:98:62:c1:08:
50:13:79:90:e6:29:bb:cc:ba:74:fb:6f:f0:a9:5e:
87:3c:05:52:f1:61:e8:5b:7b:b9:75:f0:fe:e2:d9:
61:38:ae:71:ae:8a:15:c3:61:fe:1e:38:70:e3:e3:
38:f4:7a:65:38:b4:3d:25:93:4b:f4:68:24:a0:f4:
1b:a8:5c:3e:22:87:9f:b1:9c:2f:b6:41:41:52:27:
ac:f1:d9:9b:19:70:6b:8b:47:be:ec:e2:36:60:68:
d3:b7:ff:60:02:bb:98:c9:04:bd:c5:08:ac:30:2d:
1f:f2:97:58:ae:2a:50:a5:26:ab:f2:a9:0b:16:b7:
6d:34:e1:c5:88:ae:4a:00:71:dd:c6:82:92:d8:93:
cb:a8:b5:0e:36:be:ef:9d:75:d4:c9:d5:1d:7b:29:
6d:3c:ad:67:98:73:21:b6:98:e1:d1:a4:02:3f:f2:
42:f0:08:16:cb:d4:9c:82:16:37:c2:83:da:e1:3e:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:41:DE:84:C1:DB:BA:56:B7:E7:1F:34:35:81:77:16:8B:AF:66:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b51e924-6c6c-3ca0-a6f4-b6984e702b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:85:33:df:78:a5:ef:27:06:98:28:63:03:eb:92:bc:70:e8:
24:5b:33:fb:d5:5d:03:03:1a:5a:1b:1f:42:59:ce:01:9d:ab:
85:2c:91:b6:0c:03:7d:10:1c:ef:ac:08:51:95:41:0e:35:06:
db:ec:f3:94:11:6a:9f:f8:73:6d:ae:9e:e2:43:0d:ec:d7:9e:
9f:e0:bb:ba:aa:1d:29:78:0a:7f:0a:8c:98:34:62:99:d1:4c:
00:d2:19:4f:cf:4d:53:a9:b8:5c:5b:27:20:af:2c:7f:8b:be:
f0:8a:26:27:de:7b:1b:43:3d:78:47:4f:b2:85:f8:fc:3a:ea:
05:a2:c5:d9:d3:e4:89:79:40:c5:4d:de:0c:e7:1a:94:e2:9f:
2d:64:dc:5f:f9:cd:86:72:c0:c1:bd:e5:f5:88:e5:04:a3:fd:
a0:05:08:0b:0a:f2:e3:c9:80:26:41:ce:da:30:09:e1:eb:78:
37:f4:16:32:a9:63:c7:63:b5:57:16:68:e8:e1:8f:42:9c:57:
f5:72:48:67:fa:b9:95:7f:71:8d:99:cf:63:f5:dd:63:f7:3b:
d0:be:57:cf:34:af:18:3d:b5:2f:17:df:0f:94:a4:9f:55:9e:
9a:1a:95:30:ac:75:75:de:e3:e6:27:c1:97:4d:ac:be:96:d5:
59:50:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:43:09 2025 by rpki-client