Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a05b5941-2b2f-3472-a67d-46c4395c0a95.roa
File: a05b5941-2b2f-3472-a67d-46c4395c0a95.roa (raw, json)
Hash identifier: XZdWd6dEOFOQNieEVhkPx8+W9787a2oNVbPHCVppaHM=
Subject key identifier: B7:24:AD:CD:A6:86:E2:54:4B:10:B2:93:C1:9F:D8:3A:A8:9B:B2:FB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921345C0191C205255E9D2BC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a05b5941-2b2f-3472-a67d-46c4395c0a95.roa
Signing time: Sun 09 Mar 2025 10:21:00 +0000
ROA not before: Sun 09 Mar 2025 10:21:00 +0000
ROA not after: Sat 07 Jun 2025 10:21:00 +0000
asID: 577
IP address blocks: 207.236.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:5c:01:91:c2:05:25:5e:9d:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:00 2025 GMT
Not After : Jun 7 10:21:00 2025 GMT
Subject: CN=7b1b2222-4c52-4b2e-9045-a249a2e7e45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:71:aa:72:9f:bb:5a:62:d4:17:18:63:e2:
db:7d:21:fd:a5:25:f7:a7:89:27:2c:32:c8:6c:e6:
2e:74:67:be:ed:9f:bb:3f:0e:32:6f:a1:b1:19:03:
66:e4:0b:5f:08:50:ea:b0:3c:89:7a:00:9d:74:ed:
f6:c3:11:c6:09:50:b8:63:07:4b:f2:a6:31:cc:55:
af:b1:3f:a4:ce:2d:6f:36:b3:f1:13:65:a8:2e:d7:
d4:86:73:ab:64:47:ac:7e:f7:91:8d:32:08:ca:18:
ae:28:fc:9e:01:bf:1b:38:14:29:00:d3:f3:76:6f:
19:a7:43:5d:48:74:2e:1c:20:ea:63:c2:91:fe:78:
63:17:0f:4b:1d:90:b2:34:32:16:12:a0:99:b8:9a:
0d:e4:07:44:d6:aa:e6:a9:76:c7:88:9e:28:1f:42:
f3:5e:55:ae:60:3a:93:be:0c:75:ca:19:89:64:c4:
a5:90:5e:36:61:af:48:f7:34:9e:78:8d:d9:6f:02:
0f:d0:d6:27:10:73:a0:9d:94:4a:2c:8a:37:b1:6c:
22:be:92:bf:1d:a5:05:25:ca:dd:26:aa:d5:66:bb:
a6:5e:84:ad:99:f3:f8:82:1d:95:9f:35:31:a2:3a:
ce:18:31:e9:e0:6f:bf:82:5e:9f:74:b9:71:a9:10:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:24:AD:CD:A6:86:E2:54:4B:10:B2:93:C1:9F:D8:3A:A8:9B:B2:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a05b5941-2b2f-3472-a67d-46c4395c0a95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:ea:23:ec:b8:c8:7f:2f:5b:c9:e7:7d:18:0a:25:d9:6f:a2:
e0:c0:98:be:de:69:ea:52:68:27:6f:51:02:34:3e:85:c7:81:
76:0b:2a:43:4f:72:6e:d0:51:8c:b4:16:d6:75:01:f0:b0:df:
2d:c7:63:28:fe:ae:50:e2:bb:7b:cd:f8:74:27:28:86:84:75:
9c:22:13:20:73:82:43:aa:f0:c4:1f:65:96:43:78:77:01:b0:
b9:b3:86:51:37:fe:58:e3:46:fd:72:07:0b:5a:c0:98:cc:a8:
ff:b8:e6:14:23:a2:28:b0:52:09:17:89:c3:31:8c:a4:6c:57:
04:14:1d:5c:7d:74:84:7d:0e:a3:a2:34:2f:82:e0:7e:73:fe:
2e:e1:5b:d9:ec:36:96:f0:50:4a:3e:6a:f2:bc:c0:a4:da:93:
8e:02:43:44:b6:26:fb:6c:3f:a8:4f:9a:e3:3e:3a:d1:d0:6b:
77:93:9b:1d:7c:17:7e:42:f3:29:b3:67:48:5a:de:62:2c:25:
d6:db:19:6a:53:c7:70:86:4f:b4:19:82:c8:d7:ad:e2:3d:1a:
a9:9f:e1:1b:a8:d0:14:b5:c4:af:20:71:17:e2:d0:fc:6d:ae:
7a:c2:e6:5d:a5:da:78:cf:4e:c0:b6:18:07:85:68:f5:0a:05:
64:ac:97:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:51 2025 by rpki-client