Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad96f77b-baad-3fba-991d-77259269a265.roa
File: ad96f77b-baad-3fba-991d-77259269a265.roa (raw, json)
Hash identifier: BwlLYtOWcqiFg0ZY0jwHOBOcCmFaKEALIv9y9wTgxic=
Subject key identifier: 77:46:8D:1E:0B:D3:54:DA:7E:92:24:5A:69:B2:F3:8A:7E:ED:34:4B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B56B18E7D8C1A224EF8C60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad96f77b-baad-3fba-991d-77259269a265.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 15321
IP address blocks: 207.236.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b5:6b:18:e7:d8:c1:a2:24:ef:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=3eb845a9-c284-4eec-a85a-a1018ea6c479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:dc:5f:c3:b8:a4:fa:a7:32:51:be:7f:6a:
27:00:15:72:e6:82:ca:ce:22:5d:db:79:49:ec:bf:
25:17:aa:bc:21:68:8a:0e:23:44:7d:67:95:c4:a7:
a0:99:ee:ee:3e:00:6e:10:ae:00:10:42:7c:0e:f1:
17:de:32:c1:f5:45:40:8f:f6:ff:47:5a:e4:59:ef:
4f:c9:bf:4f:f8:74:27:fc:75:04:5a:89:57:e2:cc:
9e:b3:87:4e:d9:6f:38:38:42:95:fb:45:82:d1:83:
ad:6f:0d:81:0d:9a:0f:67:4f:19:82:7c:01:ce:19:
8b:6a:08:d1:ae:f7:a4:8b:9a:e5:18:bd:b1:a4:5e:
62:45:1c:c3:fc:73:bd:ad:dd:66:26:c0:bf:56:12:
1a:44:36:9d:25:3e:22:1c:5d:41:09:f4:2f:63:d4:
97:4e:12:68:67:0a:b4:79:87:6b:21:1d:b8:fa:6d:
e5:d3:32:fa:01:ea:62:28:7f:58:e3:bd:bd:50:f4:
bb:8d:cb:4e:ba:7c:76:48:64:a1:f0:cd:fc:58:30:
c5:7f:44:83:d4:f3:7e:96:ca:a3:d6:a2:d3:be:be:
5c:9e:74:51:be:68:e3:53:13:ed:45:8d:96:7e:0e:
51:48:ac:87:5b:cd:e9:5a:5c:94:aa:bc:89:0c:f8:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:8D:1E:0B:D3:54:DA:7E:92:24:5A:69:B2:F3:8A:7E:ED:34:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad96f77b-baad-3fba-991d-77259269a265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:48:bd:77:cd:3c:94:4f:b0:dc:3b:70:55:69:35:cd:e0:ad:
42:04:f1:7a:f3:24:2f:0b:25:ee:43:c5:36:89:15:d3:af:03:
15:00:c9:ed:0e:30:70:d4:f2:fb:ff:c1:d5:2e:d1:6e:ac:09:
5f:5b:6b:02:95:d4:64:d7:a7:20:40:a1:54:19:66:87:b9:74:
c1:9b:39:1d:0d:18:cc:ce:0a:cb:8a:df:da:cc:b5:ec:f5:cd:
32:fd:39:17:49:d2:62:3c:41:24:ea:a4:6c:04:a1:ab:f1:cb:
a8:8e:f7:48:fc:3f:f8:ba:e8:9c:43:96:89:a1:b8:9a:0e:d1:
9b:54:c2:21:96:27:1a:5f:2e:1d:13:d7:56:14:eb:23:c6:19:
6e:2d:11:bc:ef:da:4d:df:cd:18:e3:2e:3c:62:e3:95:8b:6e:
04:b5:d5:eb:7d:7c:a3:96:af:e8:79:3a:57:14:cb:cd:59:e8:
b8:a0:02:2a:b8:b0:0b:fc:f5:8a:80:c6:79:e4:c1:de:c0:5c:
ca:7a:41:06:e8:3f:35:76:29:f6:80:01:21:81:fd:a2:91:ea:
21:92:4f:78:fa:a5:1c:49:9e:da:be:9b:93:3a:c6:eb:d6:15:
fc:19:1f:81:81:95:41:a8:44:dd:ad:04:d2:d8:09:a1:4c:3a:
60:f7:1f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:34 2025 by rpki-client