Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/400a67da-27e0-347b-9533-557441601d84.roa
File: 400a67da-27e0-347b-9533-557441601d84.roa (raw, json)
Hash identifier: cTb5QjEH0dw8NDuZqlGWU3rHC+OCpNdqMOMqzqFsRV0=
Subject key identifier: AF:C4:99:20:C4:E9:4B:D8:05:08:7A:8B:D1:BA:4D:6E:31:60:68:71
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213452F27E8C115DCEB1DB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/400a67da-27e0-347b-9533-557441601d84.roa
Signing time: Sun 09 Mar 2025 10:20:56 +0000
ROA not before: Sun 09 Mar 2025 10:20:56 +0000
ROA not after: Sat 07 Jun 2025 10:20:56 +0000
asID: 33017
IP address blocks: 207.61.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:52:f2:7e:8c:11:5d:ce:b1:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:56 2025 GMT
Not After : Jun 7 10:20:56 2025 GMT
Subject: CN=9b9ec51b-2baf-4ebd-89bd-9433546e5f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:02:3f:09:c7:33:b7:51:e3:59:50:6c:50:
62:5b:66:c6:19:6d:41:1e:e8:c8:2d:23:8c:18:49:
be:ad:64:ca:ec:de:72:87:44:ac:ed:34:3e:89:ac:
71:83:01:4b:f1:fc:15:4d:40:a7:e3:e9:e6:75:86:
50:4b:9d:10:b9:61:33:39:00:08:54:28:e0:b8:b1:
28:5f:5c:e8:91:dc:bf:72:0c:0c:df:29:c7:62:3d:
de:2e:88:fb:4a:f7:5d:78:de:21:e5:f3:a0:ab:6b:
66:e2:c4:96:36:55:05:ba:02:e7:46:71:9a:ce:df:
a8:56:52:6f:4f:87:9c:07:2b:db:41:8f:6d:21:f7:
9d:01:9e:cf:fc:ca:b6:7a:2e:27:be:c5:20:8a:50:
be:c5:d0:2e:56:e8:87:5e:b0:54:92:ed:58:3a:02:
12:96:c0:54:3e:a0:87:cd:c3:46:5d:6c:e3:be:cf:
df:bf:a5:3f:b3:48:5e:ee:55:be:cb:3d:1f:46:48:
c8:40:14:58:a3:dd:d4:38:3a:88:14:4b:fb:ab:c9:
6b:45:ce:fe:ac:d1:c9:cd:d0:f3:d2:5e:c4:9d:8d:
c4:6e:ff:ad:8a:91:a8:5f:a9:f7:6f:0c:2d:52:82:
1c:35:dc:8d:50:70:4b:63:3e:31:d7:b3:38:c8:7a:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C4:99:20:C4:E9:4B:D8:05:08:7A:8B:D1:BA:4D:6E:31:60:68:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/400a67da-27e0-347b-9533-557441601d84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.61.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:46:14:68:a5:71:82:9c:c4:cc:74:1e:27:da:45:20:77:05:
02:be:ec:72:5f:4f:ad:77:b1:16:c9:b6:ee:9f:39:07:42:85:
67:9d:d3:72:bc:fa:fc:34:4f:ac:e7:70:e5:41:03:53:fa:6f:
6a:a7:9b:f2:79:a6:c3:9f:1e:a5:7c:0d:9b:06:44:96:88:0e:
9f:1e:06:da:82:74:d5:bb:36:a9:04:ff:df:e4:ad:7b:13:87:
46:2e:41:0a:42:cf:b5:50:b1:88:23:3f:de:57:ac:57:4b:4b:
c0:87:8f:6a:6e:85:13:bc:42:51:1e:d8:e6:e0:33:fe:e9:31:
49:da:26:b3:46:00:dd:f2:97:e4:b9:c7:0e:28:71:fd:2d:f2:
2d:63:54:86:ba:af:c8:68:46:09:16:3d:c2:00:c5:13:e7:08:
62:1e:fd:b5:ac:25:e8:d5:7e:dc:f3:1b:c2:b5:b2:dc:56:2b:
a7:85:b7:9e:3a:f9:b8:a2:5a:97:eb:a4:d2:78:53:2a:e1:dc:
fa:f8:6b:a4:13:de:8c:5a:1a:46:cb:4a:39:36:4a:a5:b8:e6:
b2:e6:be:b7:f7:eb:82:e7:46:bd:93:a7:f1:41:01:29:1c:a5:
75:3e:f0:27:4b:ec:48:89:56:9b:53:e3:4c:a3:21:b6:86:71:
47:37:ff:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:54:06 2025 by rpki-client