Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9af2ff46-38f8-3bfb-be73-5d3e6ac5e3dc.roa
File: 9af2ff46-38f8-3bfb-be73-5d3e6ac5e3dc.roa (raw, json)
Hash identifier: WRHLjpOjuJXiLjIS5wea256lNz3Z+5wBx5GJcsZcOj4=
Subject key identifier: 0B:8E:41:53:BB:FC:14:F6:39:E4:AC:41:38:EA:34:C0:56:46:41:BE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134520849B3ABF6866919C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9af2ff46-38f8-3bfb-be73-5d3e6ac5e3dc.roa
Signing time: Sun 09 Mar 2025 10:20:55 +0000
ROA not before: Sun 09 Mar 2025 10:20:55 +0000
ROA not after: Sat 07 Jun 2025 10:20:55 +0000
asID: 577
IP address blocks: 207.61.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:52:08:49:b3:ab:f6:86:69:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:55 2025 GMT
Not After : Jun 7 10:20:55 2025 GMT
Subject: CN=12b3e822-0156-4f47-8a81-6b7c4577fc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b2:58:45:63:f4:ab:21:5e:2d:64:dc:f7:5b:
79:9d:88:88:fe:f6:da:9a:41:c3:e8:81:fd:90:6e:
c8:d2:6e:ba:5c:d0:fe:e1:91:2a:01:7e:fa:ee:3a:
aa:b7:0c:94:d8:84:31:fb:52:c3:0e:9b:72:0a:b5:
02:35:7a:9f:4f:b6:4a:a5:2d:b2:2f:18:18:4c:16:
67:11:ef:78:66:79:3f:33:84:72:f5:76:db:0f:b6:
b1:e6:d3:ce:e9:cf:9a:f5:59:cf:1f:8a:a5:ab:bd:
21:b8:bb:99:b0:67:f3:fa:7f:5f:f0:5d:e4:e7:db:
48:e4:56:85:6c:f2:46:e9:5e:82:5d:ba:ce:78:3c:
3c:bd:bd:0a:93:55:f4:e3:3a:2e:87:9a:12:26:ec:
99:ce:35:e9:cc:f4:b2:26:7e:c4:2f:d9:3c:69:65:
44:32:16:9f:d8:18:a1:87:b6:45:8d:fd:da:cd:4a:
2f:6f:6b:df:47:ab:42:ca:fb:a4:bf:e2:13:22:24:
b4:ab:af:5b:c3:fe:a3:67:ad:19:ff:94:30:d3:2d:
fc:d0:58:70:2e:5f:d9:6c:4e:54:34:25:74:c8:cc:
0d:ba:0b:8b:7e:4e:eb:8f:c0:33:df:07:70:64:70:
4e:80:1e:b4:6c:e2:09:3a:e6:2e:2a:a0:db:f6:16:
9d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8E:41:53:BB:FC:14:F6:39:E4:AC:41:38:EA:34:C0:56:46:41:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9af2ff46-38f8-3bfb-be73-5d3e6ac5e3dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.61.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:9a:cf:2d:6a:11:6d:02:25:37:b6:ad:f4:4f:ac:43:0c:19:
b2:88:b3:28:19:8a:4a:ef:7d:f5:a8:18:9d:08:8c:25:99:22:
13:d7:c5:a3:0b:13:4a:04:5a:e2:78:cb:e7:86:3f:ed:7e:c9:
c5:a3:48:60:95:0f:10:c7:33:6c:44:3f:51:43:10:11:06:2b:
e3:43:d8:d0:4f:01:8a:8b:8e:c5:6c:6b:33:77:e0:dd:da:45:
de:ac:2e:62:4a:6d:e4:1a:9f:ba:a0:e0:bd:e8:b7:ed:bc:e7:
da:f0:1d:2f:40:30:3b:fb:20:ec:5e:24:63:c3:78:34:41:0a:
ac:34:2a:0d:7b:20:86:42:5e:63:c6:bd:ba:12:58:6c:cd:83:
0b:c1:d7:80:99:bd:bb:93:55:0e:3a:fb:f9:04:e8:39:47:a1:
7c:93:56:ed:41:fb:5d:15:4c:ef:1f:bf:4d:9f:b8:06:06:1b:
7d:b0:d9:73:34:0d:f0:b2:a1:34:bb:9c:b0:57:f8:a9:bd:a7:
12:cf:54:c0:5a:46:16:0f:9c:b4:3f:4c:64:9c:c4:d3:62:f4:
fc:bc:90:1b:4b:30:7f:6e:4b:13:e7:2b:aa:77:49:82:63:b3:
0c:00:b3:78:bc:2d:66:e4:0e:a2:a6:7b:b6:33:99:b6:de:da:
99:65:69:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:42 2025 by rpki-client