Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91d6b6c2-67bd-37ca-af83-3d06a899d05b.roa
File: 91d6b6c2-67bd-37ca-af83-3d06a899d05b.roa (raw, json)
Hash identifier: alYqbULFi0QE6vBNheTff+nVlsWLFQkg0srcxwLmKn4=
Subject key identifier: AC:E3:3C:93:03:48:31:68:6C:A2:EF:6E:93:12:E2:18:F2:9F:26:A9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28E6DB671B399A768C80A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91d6b6c2-67bd-37ca-af83-3d06a899d05b.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 72.28.64.0/21 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:e6:db:67:1b:39:9a:76:8c:80:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=6366c9cf-1c30-414e-bc1b-7ffa4484b814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:dd:62:39:4a:ef:f0:33:9f:01:eb:05:df:
b5:37:80:8f:96:c2:e4:60:e1:55:ab:0e:2d:a1:75:
83:5a:aa:e9:d5:5a:7f:d2:e9:f4:b1:ec:db:30:22:
75:5a:54:36:ec:a9:5d:38:21:6a:41:6d:cf:73:a1:
6f:41:b9:f5:ea:24:81:54:f6:13:e4:58:b0:22:9e:
a3:97:64:72:96:fd:bc:f5:ae:47:31:76:88:f4:4b:
78:63:9c:fc:0d:ee:d9:d7:34:bc:a5:09:fc:b6:88:
75:32:1f:e4:9e:b5:7c:07:fe:98:9b:e0:43:05:52:
db:d8:35:64:56:52:90:0e:19:4f:81:37:11:f8:15:
b7:3b:b2:92:dc:37:3c:c7:dc:6b:cb:ef:f0:6c:d5:
be:0b:4c:70:e8:28:51:28:e6:21:93:04:6e:6d:81:
f1:dc:42:23:f8:18:3d:b8:48:9f:58:ca:fd:10:09:
43:28:29:2d:b8:47:45:98:85:62:5d:76:63:a4:ca:
6e:55:98:84:d7:73:46:6b:b9:c3:73:b2:25:24:3e:
5f:1d:be:1c:23:29:47:f6:eb:2a:fd:18:41:12:ec:
2d:0a:a6:8e:e8:41:67:1a:1c:6f:87:79:ef:95:18:
8e:0e:ec:35:e8:02:5f:7b:01:cd:cd:c3:2c:1a:4a:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:3C:93:03:48:31:68:6C:A2:EF:6E:93:12:E2:18:F2:9F:26:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91d6b6c2-67bd-37ca-af83-3d06a899d05b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
72.28.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:f0:04:6c:e5:43:88:cc:5f:e1:bb:68:92:f8:45:79:dc:90:
9a:5b:d4:fd:20:2d:bf:aa:3b:32:bf:c1:1a:d9:7a:7c:d7:41:
b3:f7:4d:21:15:c2:ea:a8:57:88:db:06:59:cd:36:b5:df:60:
03:ed:99:71:cc:74:bc:11:a7:0c:a9:34:1b:1f:77:62:58:d5:
89:7d:5b:dd:4a:30:51:88:77:a0:88:fa:03:1e:a1:df:90:ce:
31:72:71:f1:08:fe:73:8c:cb:47:e9:50:98:03:b8:24:79:4a:
f2:20:02:98:71:ba:f1:86:0b:eb:8d:8f:4c:cc:b3:1a:eb:29:
b1:0e:20:8f:2f:5a:43:0c:a0:69:f9:5c:c2:f6:d4:a3:f8:b1:
51:76:bb:46:cf:40:33:1c:d3:af:71:1d:08:20:1d:d0:20:21:
6a:b1:53:2a:58:ab:5a:d5:8f:21:17:94:bd:e4:18:32:6f:3b:
88:21:56:22:b1:84:b6:1b:c4:ab:3f:33:67:e4:72:71:8e:c0:
ff:72:12:bc:02:fb:77:bf:0d:67:f9:c0:04:99:45:73:f3:2c:
fa:b4:ce:28:65:0d:6a:39:21:9c:ed:c5:8b:19:a1:19:ab:dd:
0d:24:e1:37:84:29:78:30:6f:e6:c4:e6:bd:db:75:dc:69:81:
7f:e7:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:27 2025 by rpki-client