Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba8e7f8b-dc73-3805-b78c-11da82637e69.roa
File: ba8e7f8b-dc73-3805-b78c-11da82637e69.roa (raw, json)
Hash identifier: e8yBwz5kns2XvSarwupSQBe0WQQO073Pi0HILmZmb10=
Subject key identifier: CB:00:DA:F4:DD:5D:EF:49:73:F2:89:07:37:7F:DC:85:17:4C:77:59
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF750B990266B123BA611300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba8e7f8b-dc73-3805-b78c-11da82637e69.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 577
IP address blocks: 70.28.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:0b:99:02:66:b1:23:ba:61:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=4b3c1b32-a2e5-4d6e-9b2f-2288fb101bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:22:e9:0d:c1:31:72:c9:57:73:0d:d3:63:7f:
aa:ff:44:00:07:01:52:cb:ab:80:38:d0:03:73:ae:
e8:04:d6:1c:c0:3f:35:15:42:b8:9f:75:d4:b4:6c:
6b:ae:98:de:6f:fa:b3:c3:76:11:d3:a1:d9:fe:cf:
f1:55:13:42:9a:48:3d:4e:18:7d:3c:19:7e:f3:28:
af:2d:f0:b3:8e:e0:d7:06:62:70:ed:32:7f:a6:70:
45:42:bc:c7:4c:a5:37:f3:30:2a:ba:b3:5a:ff:43:
2e:ba:09:7e:79:d6:46:95:a1:6d:78:b0:82:22:43:
e1:84:27:a6:6b:23:40:84:da:41:38:fc:c7:8b:c8:
df:a7:59:50:26:8b:ac:32:f4:07:73:3c:2b:42:e7:
41:8c:6f:4e:49:75:1a:60:c9:ab:31:38:47:d6:a2:
cf:97:2e:4f:ba:bf:f4:e6:74:91:a7:36:6a:8c:75:
1f:52:d9:ad:52:aa:ad:0c:25:06:c9:4c:5b:b8:51:
2d:54:6a:cd:6c:8f:7e:aa:9c:55:66:32:88:c9:a0:
e4:56:c3:f5:df:5a:ae:40:93:de:81:bd:64:32:7d:
99:92:de:bc:1c:42:19:0e:29:18:05:81:e6:19:b1:
ec:0b:e8:cc:03:61:39:e9:e6:bd:99:6f:af:1f:f8:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:00:DA:F4:DD:5D:EF:49:73:F2:89:07:37:7F:DC:85:17:4C:77:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba8e7f8b-dc73-3805-b78c-11da82637e69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:4b:e0:3b:57:b7:9f:e8:79:79:a4:60:9e:be:a3:8d:41:3c:
a5:13:84:4a:3d:0b:42:39:c2:4d:0b:3b:3d:cc:a8:4d:b4:aa:
72:af:d6:dc:c3:ad:2b:92:c3:c8:44:b4:4a:66:1a:33:f7:f2:
8a:f5:23:80:95:da:3c:04:4b:c4:71:dd:65:dc:bc:a6:d8:94:
54:4b:4c:b2:a6:c0:90:a9:85:40:a9:b7:26:1e:5b:16:11:86:
b1:fa:92:52:a3:21:09:2d:8d:4b:ac:1b:56:20:82:4a:90:cb:
3e:01:3e:10:d8:75:5b:ec:28:04:95:71:c3:82:d4:52:73:39:
b9:ce:86:2b:39:7d:8e:20:34:cc:f0:4c:9e:16:db:97:f9:73:
f5:27:dc:e4:fb:02:f7:4c:18:6c:6c:f2:43:21:c8:48:b4:45:
b1:c9:2d:1f:11:97:93:eb:95:be:99:b9:dc:b3:a4:39:2c:11:
cc:af:28:51:1b:bc:bc:03:f0:b9:1f:5a:37:66:3d:99:45:0c:
01:b1:c9:1d:af:f3:5f:14:51:3e:e6:45:02:d3:4d:30:a6:bd:
48:08:00:6b:06:b4:ce:f1:e1:49:0c:8e:7d:c9:e9:08:30:61:
1a:77:a4:f3:ab:f3:35:60:a9:5a:70:a5:6b:91:5c:42:5c:05:
20:59:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:51 2025 by rpki-client