Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cf53ef8-4636-3a86-b234-8d81db9e7435.roa
File: 9cf53ef8-4636-3a86-b234-8d81db9e7435.roa (raw, json)
Hash identifier: ZIDBWHgiYkIpOrQMp+j968G8LCqAlQ9LzbmpQ3HEzIk=
Subject key identifier: 9C:88:C3:A7:64:32:43:D6:88:F2:5B:2D:FA:CE:F5:C0:0E:13:CC:D8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213457E67964FD51C2EE1480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cf53ef8-4636-3a86-b234-8d81db9e7435.roa
Signing time: Sun 09 Mar 2025 10:20:58 +0000
ROA not before: Sun 09 Mar 2025 10:20:58 +0000
ROA not after: Sat 07 Jun 2025 10:20:58 +0000
asID: 36522
IP address blocks: 207.164.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:57:e6:79:64:fd:51:c2:ee:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:58 2025 GMT
Not After : Jun 7 10:20:58 2025 GMT
Subject: CN=c2e2e5c5-85c4-4d63-87f2-39e442d5be90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:0c:f3:8f:92:d2:44:a3:61:bf:54:76:5a:
e7:18:b4:df:88:6c:ee:16:b1:68:a7:61:9e:d6:20:
a4:3f:f0:29:17:31:ad:59:96:ea:64:74:10:9d:85:
cc:53:6f:f2:6b:52:53:f7:da:06:7c:ef:9f:28:20:
6f:a7:41:87:b1:46:0d:7a:ea:6c:27:ee:ad:56:f2:
24:99:02:d9:c4:54:71:4f:ef:86:78:bf:94:16:b9:
a2:1a:aa:63:20:38:af:8a:23:57:07:2b:03:4d:ae:
73:e8:48:6e:89:a2:38:a4:8e:66:81:45:8b:fb:00:
5f:d1:db:df:6f:7b:92:49:47:ce:4c:77:7a:96:c3:
a0:04:c6:a3:8b:c1:63:dc:34:81:2b:4b:22:a4:77:
f0:89:b0:35:a9:e5:23:e9:c7:fe:09:46:92:db:3e:
a1:46:92:71:de:f2:01:2f:3e:06:be:3e:96:39:d8:
81:f9:16:54:fc:37:9d:9e:85:61:b0:57:18:db:3e:
1b:57:f9:da:2b:fc:bc:d2:cd:89:41:87:6b:9e:92:
7d:15:64:fb:db:af:21:87:81:42:00:fa:b5:a9:27:
36:d9:ae:ee:8c:ff:af:c9:38:9b:c2:02:bc:09:24:
4c:c4:8c:96:72:c9:75:c9:7e:c4:f3:a3:6f:f8:41:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:88:C3:A7:64:32:43:D6:88:F2:5B:2D:FA:CE:F5:C0:0E:13:CC:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cf53ef8-4636-3a86-b234-8d81db9e7435.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:3d:7f:ff:cf:d3:08:34:c6:a7:43:1c:e5:28:6e:ef:1e:53:
5b:57:49:1f:53:52:0d:e2:72:34:91:37:20:65:30:33:48:30:
01:b5:e3:7b:54:c1:a4:e8:07:b1:d3:aa:6b:ec:b6:cf:bd:f0:
52:d9:74:f7:89:3f:2a:e7:49:42:85:7f:fe:f2:d2:62:fc:d6:
c4:27:6f:13:07:67:c6:91:76:82:d0:7f:d0:01:ed:2a:1c:82:
12:b6:91:d1:17:95:f7:36:e2:f4:aa:5e:2d:7a:ba:24:a6:0b:
65:11:18:d2:b6:b3:33:14:45:ff:ee:cc:59:79:37:37:9f:d4:
24:6d:45:03:8b:a5:d1:d9:61:04:2c:45:96:14:04:a7:cf:e4:
34:10:0a:c6:12:7a:0e:0b:b7:50:01:c0:18:c0:67:15:b8:ad:
17:e2:28:ab:b1:f8:04:31:b7:c5:b5:b3:75:8d:15:c6:77:9f:
81:3f:c7:9b:91:d8:a8:17:60:e8:de:a7:7d:a6:5f:e1:84:c8:
23:e9:8e:be:31:e3:31:42:1a:ae:a8:4d:da:16:41:83:71:b9:
67:37:b3:9a:a9:e5:49:3f:58:88:00:68:0d:e4:47:43:12:09:
93:66:c8:d1:9f:09:22:dc:d5:ac:80:3a:56:ca:f3:bb:28:40:
2a:36:5d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:13:52 2025 by rpki-client