Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a769732d-9cf2-37a3-8bcb-8448734e19dd.roa
File: a769732d-9cf2-37a3-8bcb-8448734e19dd.roa (raw, json)
Hash identifier: kVI5vHwefmx5l5U/HR/u3lOE55oNuaj2DrnU7G4wmNg=
Subject key identifier: 44:1C:62:7E:61:53:AC:CD:64:2B:D0:26:DA:25:8B:7A:77:AA:5E:2C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B53591A14EB0E71064D080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a769732d-9cf2-37a3-8bcb-8448734e19dd.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 398721
IP address blocks: 70.28.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:35:91:a1:4e:b0:e7:10:64:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=b06b55ae-76bc-4b96-ae7f-be38ca3145f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f2:e4:e0:d4:f0:2a:24:1c:03:ad:be:4e:24:
87:14:8f:6f:dc:85:a1:a4:86:fb:70:af:54:23:ad:
1a:17:57:cc:f7:b9:59:d7:8f:e6:e6:d7:8f:fd:79:
8b:85:5d:a1:fb:82:bb:2f:0d:0b:f2:58:d1:38:6b:
d9:05:cb:fd:5a:63:05:36:01:cd:7c:4c:44:d0:2e:
a5:cc:7f:49:bc:7e:57:ee:d1:46:4d:db:d4:9b:38:
d5:08:bc:73:ae:19:ec:c9:51:e6:51:29:c1:88:6c:
f1:df:28:4f:61:0b:0c:86:64:6f:dd:64:04:80:2d:
1e:6d:86:4c:f3:d4:36:e9:1c:c9:4f:a5:a5:75:3b:
ce:34:ca:2f:e6:a4:04:aa:0c:fb:6c:9b:66:ae:06:
2f:a5:cc:f8:2e:d9:30:65:25:a7:45:7a:a7:f2:31:
1f:95:f3:ab:89:3a:5c:9e:22:79:a3:02:a9:39:1c:
f2:e8:36:98:fd:d6:ce:86:ec:2f:ee:b7:ee:ec:a4:
cf:66:88:08:d9:4d:28:9c:22:2b:00:a5:af:51:4c:
05:d2:5c:90:c3:22:07:a5:a3:f1:17:81:f4:d7:bf:
07:04:f8:4c:06:c0:7d:e4:c7:ba:59:54:be:87:99:
a7:4b:05:a4:23:4a:dc:ea:dc:1e:30:ab:aa:4c:3d:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1C:62:7E:61:53:AC:CD:64:2B:D0:26:DA:25:8B:7A:77:AA:5E:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a769732d-9cf2-37a3-8bcb-8448734e19dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:35:42:57:82:1c:0f:ea:d6:42:e0:53:65:3c:1f:84:2d:f1:
5c:35:a1:0c:00:e4:f7:fc:b8:8a:3d:b2:ec:f9:ff:6a:72:3b:
47:1f:b4:e9:dc:da:ca:48:28:76:99:80:75:48:79:b4:a5:4f:
3b:ae:2e:78:67:97:5d:3f:08:80:bc:99:ba:57:a5:da:a5:7b:
ca:71:31:c0:ee:4c:fd:76:bc:e5:03:f9:5a:e7:43:ba:7d:3b:
80:e2:ab:86:ee:12:ed:e0:10:d6:b8:1b:8b:c1:ce:19:8a:9a:
7d:81:62:6f:eb:10:bd:ad:e9:63:c6:0f:04:97:d5:b8:74:f3:
76:85:9a:55:62:cf:74:f6:d5:28:6f:4d:ab:fb:dc:b9:22:c9:
cf:71:d6:64:58:9b:60:42:93:e1:e2:e4:09:1c:a5:dc:a3:60:
b4:bf:82:90:5c:b4:21:67:12:50:a2:63:c5:e5:b4:3d:82:79:
01:cd:f1:72:51:0c:dc:0f:17:de:94:f4:0f:43:9a:59:55:67:
80:f0:8d:99:74:65:56:a7:4c:c9:d2:21:b4:5d:6d:28:c7:2e:
62:0b:fe:aa:b4:29:67:73:a3:5f:5d:3c:61:86:f3:5f:45:b3:
8f:c5:63:05:82:fd:ce:64:ad:eb:ab:c1:e0:f0:0b:0a:92:76:
12:86:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:36 2025 by rpki-client