Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/845e741d-1373-31f4-a350-5a63875de4fe.roa
File: 845e741d-1373-31f4-a350-5a63875de4fe.roa (raw, json)
Hash identifier: vL90MamE5t+EEOUlf0yXPO/tXMu1TCWWa29x7UFZS/k=
Subject key identifier: E3:04:44:E7:95:CD:DC:95:E3:3A:45:7B:E4:21:6D:F3:34:55:91:57
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213431F7477B1D8C8F9C7E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/845e741d-1373-31f4-a350-5a63875de4fe.roa
Signing time: Sun 09 Mar 2025 10:20:40 +0000
ROA not before: Sun 09 Mar 2025 10:20:40 +0000
ROA not after: Sat 07 Jun 2025 10:20:40 +0000
asID: 577
IP address blocks: 142.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:31:f7:47:7b:1d:8c:8f:9c:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:40 2025 GMT
Not After : Jun 7 10:20:40 2025 GMT
Subject: CN=72583464-d37d-4de0-ad68-625fb977d7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:67:91:ee:f6:37:b2:97:08:7e:31:1b:d7:
a8:b6:20:bc:6a:e0:63:bc:2f:63:84:47:04:d8:73:
ca:6d:4a:a3:0e:96:61:98:35:14:a3:3b:db:da:d7:
5f:bf:b3:42:79:86:bf:5d:2e:26:67:af:41:6e:57:
49:4d:e3:4c:d4:19:a3:92:9f:b0:71:d0:60:3c:50:
c9:b5:f2:86:2d:0d:a5:bf:64:84:96:71:eb:43:55:
36:9a:c4:b3:74:72:da:c8:53:ec:11:0d:65:43:88:
36:c3:47:20:61:2b:35:91:99:4e:b6:8d:de:5f:a2:
37:99:ff:d8:f9:67:01:c1:95:3e:8e:75:d6:b6:bc:
d7:20:1f:c5:04:77:2d:70:69:43:ff:62:da:4a:b4:
df:f5:98:63:5c:58:59:b7:c1:80:17:a3:b2:6a:43:
52:74:59:95:fc:15:b4:09:22:3c:4d:00:b0:56:20:
fc:b5:a8:d3:f0:c3:5b:96:a1:69:5a:de:b8:5e:75:
86:f1:d4:e1:a1:b1:9a:66:24:50:89:3f:ae:cc:5a:
6d:18:0d:55:8f:b1:52:c3:55:8d:5c:e6:e1:4f:ed:
0f:c8:74:9e:7f:fd:b3:5c:a6:6b:09:4e:b4:e9:b0:
32:15:a1:2f:af:92:02:53:6a:e7:bc:35:48:a6:03:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:04:44:E7:95:CD:DC:95:E3:3A:45:7B:E4:21:6D:F3:34:55:91:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/845e741d-1373-31f4-a350-5a63875de4fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.127.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:9f:76:c8:a6:af:59:aa:44:af:d4:f6:88:95:85:d8:41:44:
ed:2d:28:12:90:1c:cd:49:7e:69:59:e1:67:86:32:54:8a:90:
2f:ed:be:0d:8f:d9:7c:e7:6e:be:8e:ae:f5:a1:20:ba:4a:f9:
7c:a3:c5:f8:27:14:e3:29:15:cb:5b:c6:7f:d2:fc:2b:90:83:
85:53:8c:cf:28:f4:e1:2f:60:f7:cd:e8:e7:16:62:a1:03:b3:
04:0c:c9:15:61:77:91:e1:b6:02:96:d3:ec:ec:38:f1:ca:71:
eb:75:b4:f0:88:20:0f:e5:d6:3e:8f:08:b6:02:de:05:e5:da:
9c:fb:5c:8b:94:3c:bd:8b:23:f1:df:95:81:ab:37:02:f6:c2:
53:9a:2d:4c:2a:99:44:13:6c:4b:70:c7:e1:3f:07:26:2b:4a:
da:3a:cc:fd:b7:3f:8a:02:de:bd:0a:b3:ce:31:92:58:59:bf:
be:c8:d4:15:ad:c1:aa:c9:5d:0d:70:3e:d4:91:b4:29:ab:ec:
97:58:0a:f8:d3:cd:ce:68:d1:25:9f:c2:e4:3c:9c:7c:0e:6c:
4a:0d:7a:60:24:71:05:09:ca:ac:90:d5:6a:e7:e1:0b:0d:bf:
36:7b:8f:60:c2:2f:25:dd:ab:5a:82:e7:d4:fa:c1:24:88:05:
f0:c0:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:09 2025 by rpki-client