Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/434a0587-70ce-34cc-a1a6-31525a35d325.roa
File: 434a0587-70ce-34cc-a1a6-31525a35d325.roa (raw, json)
Hash identifier: T8dNtWNfApgdyiQASITSpfFgkTMFyA/wmi45nhcEboI=
Subject key identifier: E6:7F:5F:D3:3C:41:EC:17:D3:E7:0B:F3:26:1E:85:01:A8:F5:0B:BC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B667B26E71520E50CA3FFC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/434a0587-70ce-34cc-a1a6-31525a35d325.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:67:b2:6e:71:52:0e:50:ca:3f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=8aa62f18-f650-4628-a1b7-c86c0f28c3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:05:13:f5:9f:56:5b:15:63:5c:0f:ea:5d:
13:16:b7:1e:ec:3b:83:e9:c5:a3:1c:92:8d:db:e5:
5a:05:6c:a8:f9:dd:a2:57:b3:91:c3:56:0c:5a:96:
6b:5a:aa:a9:29:16:76:b4:cd:69:1e:4c:7d:c9:33:
1e:25:38:75:d7:9c:e2:94:8d:e4:d6:08:ab:4a:95:
40:5c:32:70:cf:2d:9c:d0:90:1f:06:17:37:a4:5d:
df:0b:fd:68:51:12:96:dc:f8:4f:0e:36:7e:6c:00:
83:9c:9b:eb:07:de:78:b8:40:5e:8a:0e:9e:11:4c:
02:41:eb:11:e3:96:a9:f0:4a:0e:81:66:5f:76:26:
81:73:4f:67:c4:c5:8c:a5:5f:63:e8:85:3f:58:57:
f5:97:d6:63:f0:b3:3d:e8:5d:52:87:00:7b:50:a3:
d5:09:12:b2:07:58:72:da:e2:ea:38:87:b4:40:76:
5b:fe:b6:dc:10:af:35:a3:a5:da:ca:34:1b:a6:13:
35:cb:7e:cb:11:15:c3:85:9b:5a:ee:d1:5a:4e:ed:
1b:31:82:35:59:46:78:b2:96:79:f6:24:d5:71:da:
4b:80:a1:83:d5:e3:be:0c:5c:17:eb:33:2a:dc:01:
44:47:a5:17:0a:5c:43:dd:07:f8:f7:40:47:81:35:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7F:5F:D3:3C:41:EC:17:D3:E7:0B:F3:26:1E:85:01:A8:F5:0B:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/434a0587-70ce-34cc-a1a6-31525a35d325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:6c:d5:db:41:9b:4b:07:fe:ea:5b:24:70:bc:1b:99:ce:04:
7c:99:04:bc:4d:29:5d:22:d3:3c:04:ad:27:8d:c1:fd:ce:4c:
52:38:58:c4:b7:6c:7c:15:bc:39:8c:25:c8:00:fc:8b:99:75:
52:ba:f5:d6:92:61:94:30:48:a9:d5:30:90:4b:81:84:7a:c3:
f1:ec:e4:4d:1e:aa:64:fb:7d:8e:82:ac:dd:93:5e:1c:1e:ca:
da:fe:ca:2b:e6:5f:21:69:bd:91:e1:4f:fa:fd:24:52:48:2e:
4a:dc:85:41:d4:b2:d2:87:50:f2:15:aa:e3:a6:0b:da:5c:2a:
93:a7:c1:9d:2a:0f:04:3c:56:79:95:eb:2b:86:ec:6e:ce:c7:
2a:28:ff:97:7b:69:7a:28:84:1f:1b:f7:38:1d:f0:d6:e0:c6:
80:c4:31:0b:d3:47:11:e7:53:ce:bb:d1:e8:02:24:ce:1c:6b:
16:7d:07:db:98:8f:e7:4c:61:68:1a:10:51:f2:0a:88:6f:18:
ab:4c:a1:10:c9:1c:bb:fd:f4:b0:da:ed:fd:5e:f6:86:46:4c:
e9:f4:4f:05:c2:12:9a:8a:11:b1:47:3e:ea:30:76:17:df:76:
1a:cb:93:64:27:f8:41:a4:97:9b:94:bd:c9:c4:0e:20:a0:fc:
bd:91:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:17 2025 by rpki-client