Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b15df6d2-0ebb-369b-825d-32b06adfcebd.roa
File: b15df6d2-0ebb-369b-825d-32b06adfcebd.roa (raw, json)
Hash identifier: fR5fbRW8qX9G9quh+oFYs53XesYxmo/Al0R4dFO8kgg=
Subject key identifier: 26:F5:03:CD:7D:1C:57:54:3E:77:28:AA:50:C3:C6:70:91:29:1E:44
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921345B4E2A22793A5B403E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b15df6d2-0ebb-369b-825d-32b06adfcebd.roa
Signing time: Sun 09 Mar 2025 10:21:00 +0000
ROA not before: Sun 09 Mar 2025 10:21:00 +0000
ROA not after: Sat 07 Jun 2025 10:21:00 +0000
asID: 577
IP address blocks: 207.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:5b:4e:2a:22:79:3a:5b:40:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:00 2025 GMT
Not After : Jun 7 10:21:00 2025 GMT
Subject: CN=303b7125-bcea-4a26-b762-b2d7ff59e048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:80:50:b8:c4:4d:46:5a:5a:0b:5d:07:23:
82:b3:f9:59:52:31:71:80:25:58:98:99:7d:cf:5d:
f9:3a:1f:90:8d:39:56:cf:c2:95:9a:37:f4:60:7e:
20:fa:07:c1:f4:b3:df:da:5a:25:c2:40:7c:f3:50:
05:4b:2e:ab:3d:de:53:49:65:b3:47:d3:e3:ba:c1:
90:41:bf:dd:86:d3:2c:53:06:0f:a6:1f:ee:0f:61:
90:eb:26:35:a4:1e:2a:0d:90:44:01:33:07:75:f8:
08:23:b4:b7:f4:df:df:56:5c:ff:28:78:11:5e:72:
7c:0f:2e:3a:1a:7d:51:df:6a:ea:80:55:34:4b:82:
fa:01:fd:ac:fa:0a:0f:b8:b6:7a:26:16:cd:93:be:
7b:09:d1:2b:00:de:0e:0c:6d:71:6c:93:db:a3:68:
c9:b2:8e:60:b2:d0:9c:86:1c:46:21:23:46:86:67:
36:cf:55:83:6d:f0:c3:24:20:59:ed:5a:4b:ad:c5:
cb:55:94:44:75:ed:9a:10:59:fe:92:df:d4:d5:17:
9a:18:79:eb:ae:c4:cc:7b:ca:dc:63:56:31:e2:1f:
cb:04:27:10:b0:b6:b8:53:b2:41:10:0c:a6:65:da:
2c:52:84:9c:5b:06:2a:77:04:7b:0f:ec:12:84:fa:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:03:CD:7D:1C:57:54:3E:77:28:AA:50:C3:C6:70:91:29:1E:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b15df6d2-0ebb-369b-825d-32b06adfcebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:48:e7:ae:43:6a:1f:a9:6f:32:09:59:92:67:e4:39:f5:41:
4a:b8:57:42:be:47:b2:74:01:d8:8e:6c:be:09:2f:57:48:67:
e3:d0:e6:70:ce:97:85:f9:37:6c:59:39:de:df:00:e9:fe:23:
28:71:06:2c:22:85:91:4b:43:2d:04:3b:1e:ac:c1:91:e2:6b:
71:7a:04:c6:06:bd:98:67:87:2a:96:ff:81:f2:73:de:19:61:
90:93:2d:3f:dd:2b:63:38:94:66:b6:95:8c:22:7c:b2:f8:3e:
dc:0d:3c:a3:48:55:a5:22:58:82:6e:93:79:5b:64:bf:28:21:
b0:b7:83:48:57:03:a7:72:9d:f5:35:9d:c9:ee:a9:0d:9f:b1:
4e:92:d4:83:b2:d7:89:21:08:c2:06:b6:28:a0:51:1e:58:21:
4a:1e:f6:1f:ee:6c:9a:07:cd:45:a9:2b:04:71:ad:6e:5b:b2:
7a:48:27:d5:3a:c2:40:3d:5b:6d:23:a0:41:28:40:19:7a:18:
27:38:b2:3e:88:31:15:4b:93:58:f7:b1:15:2b:27:f3:01:d2:
49:bc:ae:a8:fd:b7:fa:d4:2b:f5:19:80:c7:8f:d4:fd:96:ed:
9e:6d:46:dd:85:ce:da:e8:9b:f9:4c:40:a2:b5:d0:3e:ca:ea:
9e:06:b5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:51:02 2025 by rpki-client