Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3eecba4f-ef20-31b6-84cd-a4238c34f58f.roa
File: 3eecba4f-ef20-31b6-84cd-a4238c34f58f.roa (raw, json)
Hash identifier: KYHywEql1NrPekjs2BJDqxL/Y9TQ5euzuJP9UEp98qg=
Subject key identifier: F7:D5:B9:CA:F3:D7:77:4C:C0:F4:AD:3B:57:E3:04:4E:E0:14:2B:3F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B65E49621F114CC363CE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3eecba4f-ef20-31b6-84cd-a4238c34f58f.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:5e:49:62:1f:11:4c:c3:63:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=8b5dfde1-eca7-4bab-9014-ec2846a04cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:c3:29:61:c0:e4:9e:a2:41:13:09:43:82:
3f:34:1b:3c:40:f5:68:9f:83:ae:b5:0a:2b:a3:ff:
71:82:4d:b2:9d:be:11:7e:6b:2f:88:b2:dd:15:4f:
04:b6:a4:8a:bf:eb:60:aa:15:14:40:df:49:f9:89:
b5:76:00:35:99:90:13:07:bc:d8:de:69:6d:b5:5a:
00:9a:bf:f6:84:70:46:80:49:4e:eb:2f:a3:39:a9:
58:63:58:67:22:b0:8c:61:1c:67:5c:86:88:69:2f:
7e:41:83:b9:71:b2:71:fb:64:bc:3e:38:c7:37:23:
0e:37:c8:c3:f0:24:09:f9:9b:33:b7:38:e7:51:eb:
ae:b1:7f:81:52:ed:72:87:35:06:91:9f:c7:fd:dc:
30:16:c1:7c:77:97:66:27:e3:18:99:92:67:5a:27:
85:5c:f9:84:d6:a8:b5:93:8e:c5:b3:ae:64:07:bd:
db:a7:55:70:cf:7f:4b:1a:22:c6:5b:ab:a5:f2:a3:
a6:dd:18:a7:42:1f:11:8d:69:8c:3a:ad:ef:09:3e:
c8:09:d0:a4:5b:4b:99:a4:f9:42:d6:2a:79:3c:bd:
23:d5:f3:5b:06:36:b2:4a:db:e8:8b:48:a6:4f:d1:
81:b1:87:68:69:1f:59:7e:10:3e:e6:1d:97:15:e5:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D5:B9:CA:F3:D7:77:4C:C0:F4:AD:3B:57:E3:04:4E:E0:14:2B:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3eecba4f-ef20-31b6-84cd-a4238c34f58f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:26:6b:68:bc:fe:e4:32:5e:57:7d:e0:05:52:0e:44:01:b2:
e8:43:20:d4:31:7e:f4:aa:0f:80:90:f9:80:d7:78:ea:97:db:
0b:14:4a:1c:88:4d:dc:b1:83:19:4e:0c:13:1d:45:66:57:69:
de:f7:19:f7:30:f8:96:3e:af:e9:43:3b:ec:24:28:f4:6b:06:
4f:4a:b0:0b:c8:bd:14:d0:7e:97:48:d1:5f:db:c2:99:f0:f9:
b0:60:9b:cb:0d:ab:1a:d0:46:7f:52:89:33:71:97:70:a9:00:
9d:2b:48:22:0b:13:5e:c0:04:80:ee:73:31:ba:2b:4a:41:be:
59:73:de:3d:b5:08:30:83:be:03:f7:cd:79:96:97:09:ed:32:
9c:66:da:bf:29:75:68:0c:cd:00:13:d1:83:e2:61:ea:23:6b:
40:73:2e:0d:40:23:92:5f:5d:3b:59:02:1e:69:97:de:8e:8e:
eb:03:45:3b:b0:9d:dc:cd:af:48:99:2d:6c:53:22:63:91:91:
b9:ae:62:9a:f5:d4:45:83:de:23:61:e5:9c:70:67:ac:24:5a:
41:28:c5:ee:c0:9b:d4:07:e6:c0:66:62:f6:95:4c:fd:47:bb:
05:07:22:80:25:f3:3e:59:d3:a5:b4:3a:58:7f:b6:31:e5:3d:
a7:b8:fd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:06 2025 by rpki-client