Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e4eb7f2-6124-34b0-9eee-beb13d6fca77.roa
File: 5e4eb7f2-6124-34b0-9eee-beb13d6fca77.roa (raw, json)
Hash identifier: rUaDyDassOC+7GQb9klqVQwxA/zeX8cLEb6XvEr8NyU=
Subject key identifier: 44:C4:4A:82:73:44:9F:BD:D0:24:C4:73:FE:7E:B4:55:71:CB:B5:20
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B4072B81D9302348459280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e4eb7f2-6124-34b0-9eee-beb13d6fca77.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 577
IP address blocks: 198.235.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b4:07:2b:81:d9:30:23:48:45:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=9f1e923f-5fe0-4578-bf65-548a0eac3d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:46:36:a5:7e:11:08:b2:1b:58:55:94:15:
97:64:75:c1:0a:bb:3f:2f:e5:82:6d:a5:23:0a:01:
a3:ea:f3:67:8a:8e:fc:9d:5f:ec:54:22:2e:f5:06:
02:aa:50:eb:95:2d:d7:f7:cf:e0:a8:81:fc:7f:8d:
ce:0e:5e:bc:25:1d:d4:52:52:3d:4a:3e:a5:8b:0e:
0b:8d:cd:b8:34:7d:c2:48:8f:38:fb:ca:b7:2f:ba:
dc:8b:48:1d:f3:97:94:88:6c:ce:3c:62:ec:0e:86:
1a:a1:63:94:2d:51:e7:d6:67:97:a3:52:74:69:db:
12:73:a4:72:73:1b:ce:d5:b8:4b:8a:8d:8a:a9:6c:
a2:e3:f5:59:f5:e4:45:de:7e:d6:56:b9:6e:f4:c8:
93:aa:52:c8:01:14:05:a5:07:0f:29:3d:82:d2:a7:
0d:c9:c9:7b:a4:ed:4a:22:ec:d6:ff:da:22:37:84:
37:87:c5:e1:e4:7a:36:eb:04:cc:fe:bf:c5:27:c0:
75:da:fa:cc:09:dc:43:db:ef:7d:6b:dc:41:51:39:
04:c0:70:2d:c7:f5:a7:6f:0b:9f:42:70:23:08:11:
53:01:a2:19:d2:8b:ef:4d:61:22:4b:15:f4:0e:3c:
a9:e2:c7:f5:95:1d:a2:37:20:73:4b:7c:18:12:6f:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C4:4A:82:73:44:9F:BD:D0:24:C4:73:FE:7E:B4:55:71:CB:B5:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e4eb7f2-6124-34b0-9eee-beb13d6fca77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:48:42:03:93:48:c1:ab:15:75:7e:16:70:41:12:c0:1f:0c:
bd:af:79:66:e1:05:64:ed:2f:d1:ef:96:48:53:53:dd:ab:b7:
c2:08:b7:cb:ba:e2:cc:fb:bd:ca:fc:76:7b:13:d9:1a:37:6d:
03:45:95:c0:ff:fb:fe:2a:44:61:90:b8:1b:f2:c2:9e:b4:3a:
f6:1d:3d:49:b5:fb:6f:cd:78:e8:5c:49:d3:23:57:82:b5:3f:
85:d4:ec:88:ef:7d:31:de:50:f1:2e:63:ca:df:fb:34:52:a2:
69:03:72:ad:ed:93:6e:3e:f9:01:52:28:8b:b6:6b:b6:d7:f3:
b6:40:13:9a:44:9e:8d:5a:73:6b:db:f6:a9:fe:93:50:a6:e3:
19:93:a6:d3:26:a5:03:35:bd:b9:26:5e:60:4d:aa:04:ca:82:
09:39:2a:c7:e5:a2:0e:55:65:4f:a9:62:45:c2:d3:1a:df:4c:
13:59:ca:05:c3:49:34:77:3c:35:22:97:9f:13:c6:19:80:5a:
e5:41:e7:ce:71:82:72:04:cb:28:8e:7b:0d:a3:49:5f:95:7a:
2d:51:50:5d:ba:5b:29:d9:b8:2f:2d:e5:84:8d:cc:70:72:7a:
b4:3d:88:42:28:81:1b:de:6e:88:52:75:4d:67:c5:0e:4b:71:
77:43:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:56 2025 by rpki-client