Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a56def95-5b0b-387c-9e35-42bffe3fe95c.roa
File: a56def95-5b0b-387c-9e35-42bffe3fe95c.roa (raw, json)
Hash identifier: etH9eBUmIPU9/ypo8TwiNNYJT5KFkOZX+zaNM6r/bpQ=
Subject key identifier: 43:C5:A7:84:80:02:21:94:10:41:20:6D:9B:11:52:B0:88:01:FE:0F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213427AB8EF389C1C79A7880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a56def95-5b0b-387c-9e35-42bffe3fe95c.roa
Signing time: Sun 09 Mar 2025 10:20:35 +0000
ROA not before: Sun 09 Mar 2025 10:20:35 +0000
ROA not after: Sat 07 Jun 2025 10:20:35 +0000
asID: 577
IP address blocks: 65.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:27:ab:8e:f3:89:c1:c7:9a:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:35 2025 GMT
Not After : Jun 7 10:20:35 2025 GMT
Subject: CN=4507b69e-ef63-4657-9106-a1c43f8faebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:48:11:5d:81:d4:35:2c:a8:56:3c:4d:77:
b1:60:b4:9e:e1:6b:d8:c3:e8:d8:df:6e:9a:7d:59:
3c:ee:f9:54:bf:18:e2:c3:d2:64:91:4c:6c:81:df:
3f:15:3a:e7:ef:0a:b3:a5:86:c3:8c:d8:3a:88:d1:
c7:9f:1a:b6:bb:42:be:c1:35:e3:cf:05:50:98:62:
dd:1a:22:23:22:87:b0:11:8e:62:8e:d3:f3:6b:9b:
e6:f6:49:7a:a8:c9:95:81:9c:7c:ae:e9:8f:95:ab:
18:f0:9b:06:b5:4f:ab:1d:a0:eb:02:09:b3:0e:cc:
c2:75:79:41:1a:85:d0:1c:06:2f:73:e5:8d:4c:ce:
bc:61:8d:05:2d:80:8d:61:fd:73:a3:f7:c3:af:f0:
ac:e0:e5:2a:b1:0f:89:22:58:83:03:f2:e2:7d:66:
0e:af:5c:f6:97:ae:6d:d1:98:9f:31:b9:0f:11:7e:
ba:75:df:f5:b0:92:f5:a6:a9:24:05:e0:f2:3a:80:
3b:c0:65:66:f0:a5:83:3c:30:88:f0:1c:68:ca:09:
e2:6f:c7:f6:ba:e0:50:b3:e0:f5:61:86:c5:91:2f:
1b:ac:44:c6:f9:c7:14:77:5c:08:58:f6:be:16:fe:
d1:64:8d:ad:a9:8e:e7:17:f2:43:77:cc:48:f8:fb:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C5:A7:84:80:02:21:94:10:41:20:6D:9B:11:52:B0:88:01:FE:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a56def95-5b0b-387c-9e35-42bffe3fe95c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
65.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:a8:f1:82:a6:cf:93:81:24:ab:52:e4:01:30:39:25:db:9b:
54:60:67:e2:14:1a:67:fc:90:c9:8d:25:75:cc:c3:86:4b:37:
3d:a9:3a:c7:04:8d:e4:b3:d6:c1:3e:4f:db:d3:b5:df:3a:eb:
d6:bc:6b:1b:5a:dd:6d:e2:9c:9c:94:ce:e8:f7:9d:90:96:cc:
2a:19:b8:36:30:17:5a:96:1b:26:22:d9:10:90:bd:5a:bc:0d:
61:18:b0:53:d0:a0:7d:68:10:ac:01:43:ce:da:46:e5:bb:3f:
bc:e2:e0:f0:ca:e1:6a:55:31:10:bd:fb:83:54:7f:e2:91:79:
db:b2:82:6f:ae:99:4c:a7:83:23:b9:a2:ce:b6:85:c3:2f:b2:
f4:31:ec:63:89:4f:1d:f8:cc:3f:df:f1:2e:69:9e:ad:c4:f0:
d0:30:8a:6a:66:c0:db:6c:4c:db:4f:bc:d6:e5:15:46:88:33:
08:bc:ec:e1:44:64:8c:d9:e3:7a:5a:08:a5:dc:e8:89:49:92:
c9:25:14:a9:34:32:c9:91:ee:65:87:5d:90:e2:64:76:7b:32:
09:8d:a7:fe:76:d1:8d:9a:00:fd:10:b8:d7:37:da:09:5c:a0:
aa:62:df:9c:ac:14:67:85:b7:ee:36:ff:0b:5d:ae:ce:28:58:
79:4a:ed:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:47 2025 by rpki-client