Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/904539b7-71cb-3465-8025-53abdc401259.roa
File: 904539b7-71cb-3465-8025-53abdc401259.roa (raw, json)
Hash identifier: ooHaE4r1dRZV/Q0qRbzwkXhyuUDPf8gOisV4E55BYaA=
Subject key identifier: D7:53:19:2F:AA:0E:1F:80:04:DC:6F:30:03:1A:46:4C:00:51:0C:57
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213433A6C5CD96A633182000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/904539b7-71cb-3465-8025-53abdc401259.roa
Signing time: Sun 09 Mar 2025 10:20:41 +0000
ROA not before: Sun 09 Mar 2025 10:20:41 +0000
ROA not after: Sat 07 Jun 2025 10:20:41 +0000
asID: 855
IP address blocks: 142.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:33:a6:c5:cd:96:a6:33:18:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:41 2025 GMT
Not After : Jun 7 10:20:41 2025 GMT
Subject: CN=a1937908-9599-42cd-a51c-2ef925634caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:ae:95:74:c9:e4:55:c2:a2:2c:52:d2:4d:
d2:e2:8a:f4:eb:9d:4f:41:5b:7f:dc:b6:85:67:32:
b0:aa:07:bb:9c:b5:6c:d5:0c:61:dd:2c:fe:35:58:
d1:dd:ec:ca:ed:a7:e1:75:7e:a7:09:39:f2:a4:ea:
f8:97:9b:93:4a:2e:3d:8c:4d:99:16:a9:fd:a1:00:
b6:47:e4:cb:b2:6e:10:02:61:2a:66:0c:b1:c0:1e:
e0:ad:ae:54:f1:66:bc:c7:d3:62:3f:2a:30:19:02:
9b:e6:32:d7:52:f8:5d:cc:99:ee:a2:87:09:ad:0c:
81:ee:a7:69:72:06:e4:ba:84:49:05:f1:aa:1d:d3:
3f:c8:de:77:c2:73:d1:81:81:6b:e9:56:35:21:c9:
72:4f:8a:b7:47:5f:fd:6f:1c:1b:a9:28:3e:f3:e4:
f2:4b:5c:e4:e5:64:77:c1:d6:4a:af:ee:28:d8:ea:
b4:15:ca:27:30:fd:5f:97:83:42:27:b9:4b:14:c0:
43:20:c6:72:65:77:fa:b0:74:cc:b0:56:63:92:bf:
20:01:80:62:60:49:d1:f3:f5:b7:1a:48:b3:15:50:
1c:91:90:a4:29:e3:7e:b6:a7:52:46:5c:5e:df:b6:
e2:69:a1:e5:74:a3:2d:cc:ed:81:b8:e3:b2:32:2c:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:53:19:2F:AA:0E:1F:80:04:DC:6F:30:03:1A:46:4C:00:51:0C:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/904539b7-71cb-3465-8025-53abdc401259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:48:2e:8a:38:f5:70:03:b1:a5:86:c5:87:cb:61:32:0b:9a:
75:f6:88:5c:6a:be:6b:f6:71:12:2b:5c:0d:ec:a9:e3:2a:9a:
c2:86:88:fd:ff:6b:8c:69:8b:f8:fb:fa:99:b3:b7:11:e8:a1:
9f:b4:f4:b3:1b:8d:5a:db:25:1c:60:07:c8:0b:9d:8f:33:e2:
15:bb:9a:7f:ea:1c:c0:0e:03:42:58:4e:f8:97:64:75:7b:cb:
0a:31:b3:c2:dc:3d:ab:89:df:55:b3:69:2c:85:99:2b:90:c4:
34:f8:9b:6d:47:6f:f6:03:b4:92:2f:94:12:76:1e:3b:3e:5e:
1d:56:a8:f2:dd:27:d6:d2:e6:33:7a:a8:35:8a:c2:50:94:4f:
8b:0d:44:bd:9d:77:f7:3f:10:7e:b8:f8:91:13:87:80:69:24:
60:84:4c:68:54:53:54:f2:ca:00:78:b4:a6:7d:aa:5d:71:10:
32:19:e0:92:51:e4:25:0f:b6:a5:fb:ca:45:0b:78:fe:72:cf:
45:80:eb:76:b3:a8:cc:0f:c3:18:f6:37:74:2b:66:5b:04:3a:
f0:50:60:4b:db:ad:5d:22:3b:85:af:1e:09:22:ac:1f:fd:59:
b6:ba:45:47:39:e1:ef:c5:60:57:c7:02:cf:ae:af:21:4f:aa:
d3:4e:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:55:29 2025 by rpki-client