Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af44c1b7-142f-3931-b572-e34fa6268bd8.roa
File: af44c1b7-142f-3931-b572-e34fa6268bd8.roa (raw, json)
Hash identifier: op8KguPrCpWk8qW5BoynzIW9BBHWeRthDEdCTaEPYgQ=
Subject key identifier: A1:4C:69:D9:41:30:B1:B2:F2:24:B5:4B:47:8D:94:72:39:AE:FE:C6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134418614E4A7FE2D041600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af44c1b7-142f-3931-b572-e34fa6268bd8.roa
Signing time: Sun 09 Mar 2025 10:20:47 +0000
ROA not before: Sun 09 Mar 2025 10:20:47 +0000
ROA not after: Sat 07 Jun 2025 10:20:47 +0000
asID: 13441
IP address blocks: 204.101.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:41:86:14:e4:a7:fe:2d:04:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:47 2025 GMT
Not After : Jun 7 10:20:47 2025 GMT
Subject: CN=8b40dffb-fbed-4d85-91fe-4dd249266622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:26:5f:b4:34:01:0a:df:0f:97:1f:5b:54:37:
57:2b:43:d1:05:81:4a:3e:21:7b:b8:ae:cd:a8:e4:
9d:a7:3c:c6:7e:73:c9:c1:a5:b3:f5:66:96:0c:cf:
d6:93:70:1b:e8:fe:e4:97:b2:c9:3b:55:af:a1:93:
48:86:01:d3:ab:20:31:17:01:f2:36:51:9f:a6:0b:
1f:c0:b3:6d:f5:b7:fe:11:cb:d0:0a:02:71:71:35:
61:30:06:7c:af:4a:f2:a9:b4:e6:f0:b7:34:4c:b0:
94:8b:15:af:2d:26:ea:42:54:2c:83:b6:9c:96:64:
e6:07:2d:6b:5d:d0:f6:ce:e5:ae:e5:93:df:12:d6:
2b:e8:6d:7f:8c:d7:f8:aa:59:69:65:7c:71:a3:b6:
a0:8b:1b:1c:69:a4:13:52:51:4a:38:f9:8d:50:4d:
ed:4c:0b:15:88:12:0f:bf:16:16:b6:3d:13:ca:a7:
b1:6d:01:5e:b5:c8:cb:4d:78:7d:6e:49:d5:3c:30:
70:38:03:f9:96:c6:21:f6:6e:78:35:92:3e:47:80:
d5:04:61:43:ef:4a:31:ba:86:06:9a:65:3d:76:df:
3a:15:c9:d9:52:45:9c:d5:7f:cf:e8:84:0e:08:04:
e0:90:3c:bb:4d:3b:b3:fa:43:28:6a:ab:d8:31:d3:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4C:69:D9:41:30:B1:B2:F2:24:B5:4B:47:8D:94:72:39:AE:FE:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af44c1b7-142f-3931-b572-e34fa6268bd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:4e:3f:c2:98:bf:4a:b3:a9:e3:f9:95:40:ff:46:e6:c5:99:
4b:45:4e:2b:79:09:50:b2:e0:03:43:da:24:04:6a:18:81:86:
87:99:a0:c8:8a:c0:f8:9f:37:39:5b:69:71:1a:62:c2:f6:5d:
40:7a:f0:51:39:21:3a:5b:62:21:3c:4f:0b:00:8a:ce:1b:be:
c1:e3:de:a9:7b:5c:43:a8:5b:8d:25:fd:a5:14:8e:f7:ea:a3:
80:c2:91:56:39:d8:db:c3:99:58:6c:71:05:91:17:c4:c1:fa:
a7:7e:20:8f:33:a6:53:2d:de:aa:ff:09:00:b5:e6:7c:22:78:
69:93:d3:cb:5e:70:f7:a2:c6:be:94:6c:59:15:a5:ad:a1:0d:
7f:15:bd:b8:c7:fc:13:44:8c:a1:e4:4f:ab:a8:87:d7:bc:1b:
75:75:4b:11:81:23:65:9b:4e:ac:24:7e:dd:44:02:2e:18:d3:
64:3b:6f:4b:f0:a7:6a:78:ef:c8:67:71:f8:54:27:ab:98:ff:
30:15:80:70:04:44:fd:76:0c:fe:4c:97:32:13:13:78:2c:6c:
24:8c:b4:be:ea:7f:b1:73:81:c6:7f:ad:68:3f:89:ac:20:e8:
f2:e1:99:a9:df:ba:99:d0:98:87:08:82:6a:77:6a:2b:e1:d7:
4d:4f:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:37 2025 by rpki-client