Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bbfae60-4960-3e7f-8c84-89601126f245.roa
File: 3bbfae60-4960-3e7f-8c84-89601126f245.roa (raw, json)
Hash identifier: ZNHLEEm00o4VR+ucMnC2Vhq4ISbAu9Cl7SuikcnUGBE=
Subject key identifier: F7:09:E1:2F:10:A8:73:03:BE:F2:E3:7D:76:AC:24:FE:BB:10:7F:72
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343599811A514314A12640
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bbfae60-4960-3e7f-8c84-89601126f245.roa
Signing time: Sun 09 Mar 2025 10:20:42 +0000
ROA not before: Sun 09 Mar 2025 10:20:42 +0000
ROA not after: Sat 07 Jun 2025 10:20:42 +0000
asID: 855
IP address blocks: 156.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:35:99:81:1a:51:43:14:a1:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:42 2025 GMT
Not After : Jun 7 10:20:42 2025 GMT
Subject: CN=878876d5-362b-4a81-9096-ef3a15bcbddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:61:b4:30:7b:4c:0d:ad:75:c3:37:64:88:
52:40:b5:53:ed:a6:bf:2a:07:47:2c:67:4a:db:31:
63:e8:68:0d:6b:27:43:9d:6e:76:50:0e:0c:6b:36:
1f:e4:e0:7d:a3:66:e5:7a:d2:2b:57:17:d4:fc:58:
59:f7:78:e2:17:92:14:cb:31:4c:58:35:90:b3:fe:
8f:05:98:5e:e7:37:37:5d:f0:f9:0d:0a:2d:49:92:
6a:44:0a:95:7e:e3:e3:33:c0:6f:da:db:cc:d6:ac:
90:77:f4:c2:4b:a4:18:1b:22:83:04:67:62:00:a6:
57:ec:81:24:cc:cc:f1:ea:7e:d0:14:c0:c7:b2:b4:
3a:05:95:03:21:2e:cb:18:61:4c:bf:f5:55:74:70:
d1:b2:2e:38:f4:a7:9f:58:5b:2e:fa:8d:04:d5:5f:
79:13:50:a2:c3:19:73:5a:2d:b9:50:c1:bb:9f:3c:
12:ec:3c:e8:e7:a2:fe:97:01:f6:5e:7e:36:74:a2:
f1:47:da:a3:f1:8e:f6:16:b0:c0:1b:de:09:59:37:
bf:c3:ac:cc:88:e7:77:15:91:26:1c:16:0a:61:ac:
ba:72:10:60:f9:bc:5d:0b:d5:8f:9c:59:62:6c:17:
f3:b0:e7:83:ef:bf:bc:14:8b:4c:05:c1:1b:c6:5a:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:09:E1:2F:10:A8:73:03:BE:F2:E3:7D:76:AC:24:FE:BB:10:7F:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3bbfae60-4960-3e7f-8c84-89601126f245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
156.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:4c:d1:45:40:e9:5a:74:cd:fb:a5:cf:ac:84:a2:b0:fd:95:
e7:46:5a:f9:c8:fc:6c:e6:9b:cc:cb:44:c0:b8:71:96:c6:d1:
07:ac:06:8a:8a:e0:03:7e:5e:98:f6:3c:d0:08:96:61:01:00:
08:62:1f:c0:b7:af:94:a5:e5:22:25:81:d9:13:ba:6a:ae:ff:
0e:70:f9:ac:b0:28:d3:ad:2d:5d:33:64:99:67:c9:b7:a0:b5:
70:3d:50:b9:5f:43:4b:bf:a4:49:11:a3:1c:8d:e9:8f:fd:dc:
3a:92:47:85:55:43:6c:15:ad:3c:a6:18:1c:6f:c8:92:06:7e:
13:bf:ba:59:69:21:32:ff:74:c6:c3:33:1f:66:29:07:1e:a6:
31:72:ed:58:af:92:41:d3:41:84:26:12:d1:89:7d:9a:1c:33:
bd:a3:d2:0a:3a:1f:6d:08:a6:73:8c:c7:b0:3e:51:73:ea:08:
4a:94:a1:d6:a0:8c:69:98:2d:f4:21:18:3f:38:bb:ca:97:9a:
36:5d:ec:3e:e4:8b:a3:7c:22:14:e9:c6:0d:e9:bc:0f:0c:61:
d8:ba:ab:75:79:f8:d0:99:99:7c:57:7c:f7:0c:9e:00:af:c1:
fa:3a:43:db:16:9c:13:ca:25:91:28:0b:03:7b:26:3a:60:2f:
b4:b6:49:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:37 2025 by rpki-client