Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6a46f22-492c-3e29-acf8-200d8ebf2421.roa
File: a6a46f22-492c-3e29-acf8-200d8ebf2421.roa (raw, json)
Hash identifier: iJxeCaow1l46EgLMzZf7V22ZWTDd37eL1oXA3LLfEog=
Subject key identifier: 3E:93:C8:2C:20:D6:9C:6C:AA:D4:B3:99:BC:B5:CA:49:40:BB:3B:39
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285849213431C792000E2286DA0280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6a46f22-492c-3e29-acf8-200d8ebf2421.roa
Signing time: Sun 09 Mar 2025 10:20:40 +0000
ROA not before: Sun 09 Mar 2025 10:20:40 +0000
ROA not after: Sat 07 Jun 2025 10:20:40 +0000
asID: 577
IP address blocks: 142.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:31:c7:92:00:0e:22:86:da:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:40 2025 GMT
Not After : Jun 7 10:20:40 2025 GMT
Subject: CN=dbf2c75c-484c-418e-9aab-7ecc48bce9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:fc:7e:cc:32:61:80:05:b0:42:b5:23:95:
26:7f:f7:b4:de:9f:cb:a3:42:61:80:3e:73:cb:0e:
a5:f4:f5:dc:bc:58:19:1e:2f:cf:8d:a0:45:b0:45:
fc:9f:6f:0a:33:b2:0c:9d:57:e4:22:eb:fe:df:ab:
71:6f:d1:9b:a9:bf:92:5d:cd:b1:aa:b1:65:1e:66:
36:fc:fd:e0:fd:27:45:bc:3a:31:2f:f7:df:39:54:
7a:7f:14:7d:12:91:e7:f9:8d:c4:e5:f9:03:1b:70:
17:f7:65:ee:4f:32:cd:d5:09:1a:5b:2f:ca:f7:52:
29:42:7d:ca:37:03:81:6a:6b:63:06:30:9b:14:f0:
ae:ca:12:65:89:a8:31:13:cb:bf:bd:31:b3:78:6e:
98:a5:92:9f:c9:6f:99:8c:6e:d1:0d:76:ee:48:8f:
c4:c6:d6:ce:a4:f9:e5:50:07:fc:9a:8d:e5:0a:cd:
33:a0:4e:aa:14:36:b1:07:51:2b:de:dd:76:4d:a6:
af:dd:4e:28:04:98:49:6f:19:f5:1c:33:2a:e1:bd:
65:4c:0d:d1:06:27:83:70:d7:a0:ef:61:fa:75:8f:
33:32:35:b7:75:6c:2f:19:ac:de:2f:4f:3b:40:b4:
60:62:cc:3e:16:d0:d3:e8:3f:4a:69:a6:8a:5c:55:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:93:C8:2C:20:D6:9C:6C:AA:D4:B3:99:BC:B5:CA:49:40:BB:3B:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6a46f22-492c-3e29-acf8-200d8ebf2421.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:2f:da:ac:b4:5a:3b:58:32:09:9f:d5:3f:c6:35:08:2a:09:
df:c1:b5:08:ca:b9:8c:10:93:99:9a:70:45:c4:9f:e5:48:27:
95:a0:be:53:c0:b3:b2:c1:be:5e:21:b0:5a:2d:f5:dc:75:6a:
43:ea:6f:74:36:eb:c9:b3:01:ea:f0:9c:55:26:b9:29:ac:e8:
0d:5b:58:20:8e:44:f5:5e:c6:56:12:6e:11:29:80:5a:0f:3a:
c3:83:c1:ca:1c:31:14:cf:10:aa:2f:7a:13:8d:91:d7:2a:15:
95:8c:11:5f:ec:94:78:e1:2a:66:8e:56:50:ab:0f:44:72:33:
3b:cd:12:02:8c:01:14:02:38:5d:a0:46:97:08:97:9a:62:7b:
37:e7:ff:cb:01:dc:99:a5:73:6c:59:ed:03:3a:e1:59:d0:99:
cf:12:86:33:69:24:af:29:e3:29:b5:57:91:9f:d5:50:78:35:
59:1c:29:7a:a0:a9:82:4d:dd:33:85:63:8b:08:f7:09:f8:3f:
07:f5:ec:2e:77:ba:29:25:c6:1b:a7:da:ac:4f:34:d5:2d:22:
fc:81:e1:ef:3d:9f:1e:de:a7:e0:d7:be:ab:ce:97:b8:cb:a3:
49:56:b0:ae:f5:10:1e:70:84:b0:b3:d1:a4:29:db:ee:ed:7f:
4a:3a:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:13 2025 by rpki-client