Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bbe5cb47-1fe0-30b3-9328-60f79126c428.roa
File: bbe5cb47-1fe0-30b3-9328-60f79126c428.roa (raw, json)
Hash identifier: BnhADuO7SkpP3g57EeS3St5yygSVvrvj8X+1lOm+dGo=
Subject key identifier: 41:EA:A7:E4:96:60:30:70:5A:14:31:25:26:76:05:51:59:B3:A0:B0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7678EEBE4DACFF2A40F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bbe5cb47-1fe0-30b3-9328-60f79126c428.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 207.236.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:67:8e:eb:e4:da:cf:f2:a4:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=19e5d936-d125-4eea-b22e-cc8ea5f9fdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:2a:26:ac:b3:a3:8c:f8:02:41:7f:43:a2:
e7:f2:37:ef:b2:c0:63:7a:65:da:6f:00:4e:5d:90:
5a:ef:a4:77:9a:34:ad:b2:c5:e3:26:84:dd:0f:9c:
96:d9:89:46:96:c2:94:2d:24:36:64:2c:94:ed:d3:
83:ce:4c:0a:a5:9f:bc:d2:cf:96:ad:ff:85:1f:28:
2c:64:5d:47:38:b6:62:1f:51:d5:c0:bd:97:85:e2:
01:34:aa:ed:8b:e5:8f:7d:4f:0f:ff:b0:e3:8f:0e:
c0:9f:9a:80:1b:43:84:e0:8d:f5:4a:c7:0e:aa:19:
38:be:c1:f2:d4:fd:67:ce:8c:af:dc:73:33:92:8b:
e3:c0:88:7f:2c:c5:37:e2:6e:cc:7b:28:34:c4:e2:
b1:83:27:3e:fc:ff:a7:95:d1:cf:bc:46:4d:de:e0:
bc:05:17:4d:e3:c1:1c:5b:57:86:38:ed:14:17:6c:
11:27:74:98:ec:49:c1:05:0a:6b:92:53:76:f7:6e:
59:bd:28:4d:a1:d8:20:15:e4:eb:91:65:5d:81:b0:
0a:1f:5b:70:f7:76:e7:a3:33:64:56:35:dc:e9:0f:
19:e9:a6:5a:76:50:17:e0:30:72:11:65:6c:06:4b:
00:14:c7:c6:6b:99:1f:30:d5:9d:c0:f3:30:6a:fb:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EA:A7:E4:96:60:30:70:5A:14:31:25:26:76:05:51:59:B3:A0:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bbe5cb47-1fe0-30b3-9328-60f79126c428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:7b:ab:fc:82:1f:74:80:ce:0c:da:e9:a2:ca:1f:86:94:d5:
00:f6:0d:b0:db:0a:17:94:bd:e1:d9:a8:86:5f:51:73:94:23:
10:3f:ce:03:87:3a:52:4b:71:40:26:82:23:0e:33:2b:eb:37:
fa:63:f6:85:be:e8:58:11:bd:2a:38:68:f3:a2:4b:8c:50:d7:
73:06:30:c0:78:1d:83:01:9a:76:56:67:de:a1:d9:09:f4:ce:
51:96:99:07:7c:1e:75:b8:ae:f9:23:69:24:fc:cc:96:8d:77:
99:dc:da:ce:e6:fc:dc:d9:b8:73:e4:13:cf:7a:8b:49:09:e4:
e4:75:bc:47:17:35:4f:34:50:64:7c:a6:1e:98:77:09:a6:b4:
b1:29:66:3c:cf:ae:95:cc:ff:88:56:c1:d4:9a:ef:ec:3c:4a:
2f:bb:9a:c6:a3:06:d7:7d:1d:d2:bb:6a:7b:58:23:33:a1:3c:
67:a9:7a:bd:ca:8b:c1:52:25:1c:73:f3:89:6d:f2:d7:ab:34:
17:ad:0c:1e:a3:53:51:01:d7:d2:c0:4b:54:0c:03:95:e5:7b:
bb:71:4e:21:1d:17:55:4f:05:7b:7e:44:a7:59:88:d2:c1:78:
14:3e:d2:f4:c6:04:6e:c2:80:c9:1e:11:30:b1:2e:7f:9f:0f:
5e:bd:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:19 2025 by rpki-client