Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6cfecf81-92cc-3e2e-9f0d-cb7aff20157e.roa
File: 6cfecf81-92cc-3e2e-9f0d-cb7aff20157e.roa (raw, json)
Hash identifier: C5MgEH7R+SkWMyc4p+KjGaNZJS/17L11le2IbrOcVUk=
Subject key identifier: 9B:36:57:BE:DB:1C:B8:E0:03:A3:67:8C:A5:5B:93:49:47:A1:E6:BC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213425854FB14FE1FDFEE280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6cfecf81-92cc-3e2e-9f0d-cb7aff20157e.roa
Signing time: Sun 09 Mar 2025 10:20:34 +0000
ROA not before: Sun 09 Mar 2025 10:20:34 +0000
ROA not after: Sat 07 Jun 2025 10:20:34 +0000
asID: 855
IP address blocks: 47.54.0.0/16 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:25:85:4f:b1:4f:e1:fd:fe:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:34 2025 GMT
Not After : Jun 7 10:20:34 2025 GMT
Subject: CN=48f06b57-9f90-460b-bd30-6fa0ffe33a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:ab:12:4c:54:f0:a9:9a:67:10:a9:bf:a0:
3c:de:dd:65:1e:8d:10:76:35:72:62:1d:05:41:73:
bb:21:76:f7:eb:b9:c3:1d:69:46:cd:03:a2:45:85:
e1:25:2f:ec:08:5d:9f:60:d7:16:77:c4:ca:be:1d:
cd:39:80:b0:12:82:75:77:d3:76:bd:b0:23:ff:2f:
e4:fc:a1:99:fc:20:9d:55:1e:59:5a:af:ca:31:83:
87:8f:f6:fc:02:19:e0:98:93:b5:9e:ce:42:ff:f7:
18:e0:4a:2d:ef:04:a2:e5:4f:7a:05:67:d2:29:18:
b7:f9:d7:45:e3:06:56:e4:b7:6c:16:3c:31:b4:22:
bc:b3:83:79:0c:0a:e9:82:07:3b:9f:0d:2f:91:e8:
39:b1:8e:e3:c9:46:bc:4f:35:11:72:38:63:3c:39:
32:68:47:52:ef:f8:6c:ef:ec:d2:c6:41:b3:18:eb:
b1:e9:44:16:74:89:b8:53:8e:2b:4c:1a:48:06:77:
b2:26:61:5f:ed:c3:7b:e0:21:9c:84:39:11:78:e6:
05:31:92:90:b5:7e:16:11:db:d5:1a:18:23:79:7d:
f0:46:8a:2b:86:3f:50:9d:4b:8f:16:bb:b7:ff:f9:
97:e1:4b:27:5e:da:c6:36:e8:bd:d4:33:ee:84:a2:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:36:57:BE:DB:1C:B8:E0:03:A3:67:8C:A5:5B:93:49:47:A1:E6:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6cfecf81-92cc-3e2e-9f0d-cb7aff20157e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
47.54.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:44:bc:18:5d:ff:77:86:ab:43:c7:b7:94:a2:b8:9e:3b:f2:
a8:cf:ab:93:73:44:3e:da:96:fb:ff:1d:0d:66:f3:c6:40:6d:
24:7b:59:6a:a0:a1:3b:3a:50:fc:72:93:f2:86:6e:84:39:9a:
c6:0a:93:81:71:46:87:de:ba:6e:82:c6:3c:7a:b7:f8:70:e6:
4c:97:e4:83:b8:96:90:28:f3:07:5d:67:bf:28:15:48:58:33:
ac:e4:f2:14:92:8b:43:38:20:f2:9d:2c:6c:8f:f6:0d:39:c1:
a6:df:50:9c:c3:ea:56:3c:e5:13:ae:e1:17:6a:fc:bf:77:bc:
d0:c1:28:e3:12:48:b5:49:57:d9:29:cc:49:fe:b9:f3:b5:a0:
32:51:f7:f4:98:4a:9c:a3:03:b4:23:ff:26:01:8f:20:78:c1:
dc:de:69:ff:50:28:2e:99:1f:66:1b:d9:fb:a2:7a:dc:a4:ce:
c1:6c:2b:b3:6a:53:7f:ac:cf:83:22:bd:e5:c3:f5:e7:4a:49:
93:4b:fd:4b:1d:b5:3f:f7:75:9e:64:8f:9f:c0:44:84:d1:d7:
bb:97:cf:ad:e6:45:30:c3:51:16:d4:05:b4:50:e5:1d:37:76:
22:1a:c8:f6:49:4d:0b:4b:89:06:93:e3:f5:33:25:e3:4c:c9:
03:10:e2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:17 2025 by rpki-client