Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8709baaf-f85a-3632-aafa-b585b214d86d.roa
File: 8709baaf-f85a-3632-aafa-b585b214d86d.roa (raw, json)
Hash identifier: c8CLXZFvdiqlbx05rdKCT1oM2nHZ+1jw0Hx999TNk28=
Subject key identifier: 67:00:94:0B:EF:01:D2:46:E3:0A:9C:4C:FF:6A:D8:B3:31:A3:05:59
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5A413B429FA8E8D7A7600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8709baaf-f85a-3632-aafa-b585b214d86d.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 156.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:a4:13:b4:29:fa:8e:8d:7a:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=2a73a6d5-ae1d-4201-9fa8-7b9d997e82fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:ae:96:c6:5f:6f:ce:ba:07:6f:ff:d4:d8:
9d:f2:ac:1c:4e:98:e0:fc:b6:51:15:5e:25:02:5f:
76:84:99:db:17:6b:c6:1a:e7:22:38:42:ef:5f:d1:
6d:45:02:56:a5:22:15:15:8b:ac:5e:70:ca:98:80:
78:9d:da:9c:58:07:f9:df:81:db:98:47:6e:c4:35:
91:04:cf:8b:b9:6a:bc:ab:8f:f9:94:e1:1b:82:0b:
0f:0a:90:2a:f2:85:05:4c:96:a2:05:36:45:6c:f8:
18:76:b9:b2:b6:76:e3:00:d6:b0:7f:69:4f:21:b0:
48:a2:27:c3:3f:fe:74:37:32:67:70:cb:99:c4:9f:
48:e6:72:2d:d0:28:f4:7a:fe:58:54:cc:b2:56:3c:
8d:65:fb:de:d2:29:89:0c:1a:01:6a:03:9b:5c:5a:
80:03:66:53:03:4c:56:02:63:36:89:c8:c8:c9:6e:
9e:a5:0d:c0:8c:cd:b4:6e:31:b1:c2:c2:79:c6:56:
96:f9:66:29:26:7b:03:7a:80:6c:e0:70:8b:03:63:
33:28:72:3f:f2:ef:70:2f:18:17:79:f7:4d:ba:e4:
67:6b:d1:23:a7:8e:19:9b:ea:b6:cf:74:65:e0:e2:
08:ee:36:3d:ce:2a:ed:af:63:59:ec:2c:50:6b:25:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:00:94:0B:EF:01:D2:46:E3:0A:9C:4C:FF:6A:D8:B3:31:A3:05:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8709baaf-f85a-3632-aafa-b585b214d86d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
156.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:f2:19:1f:5a:6c:a6:f7:c7:de:e9:a7:aa:66:6a:f2:0f:16:
bb:fb:bb:4f:dc:5b:2c:1b:1a:b9:d1:63:b2:4a:94:8e:09:9f:
41:6c:4c:a6:c5:fc:33:5e:26:03:1a:a6:f2:3b:a9:49:7d:46:
10:1d:1e:a9:a3:5b:8f:66:37:c6:5f:c7:11:e9:f4:ea:64:6a:
c0:2d:81:6d:35:7f:0c:11:31:e1:a5:36:e3:ab:71:c6:e6:d2:
fb:18:e8:28:21:73:7c:4d:fd:1b:ac:b1:a4:89:9e:55:3b:6a:
57:03:5f:86:02:4b:4f:c2:bb:15:b8:ca:98:74:8b:c1:4c:4e:
04:79:98:fb:37:f5:6d:37:6b:cc:ef:6f:f9:32:35:1c:5c:0d:
73:11:9f:8b:fb:9d:e2:28:1f:99:ae:fc:a0:dd:2b:e5:07:42:
f5:aa:12:8e:9c:21:6c:0b:a5:a6:bc:59:ab:cf:8b:e1:22:90:
0f:ad:e2:ca:68:01:44:7d:be:6a:9f:82:28:f4:d5:89:7c:cd:
cd:21:c7:c2:4e:6c:58:3b:e8:c6:61:e5:a2:b5:7b:34:53:f8:
4a:da:f3:63:fb:0c:e3:d1:9f:32:42:43:c3:0f:a8:43:fa:13:
f7:14:81:a6:c8:c6:85:fb:11:5e:c0:c9:48:bd:6b:7a:19:d4:
be:8f:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:16 2025 by rpki-client