Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c38b5670-ed0b-3052-9a32-65fe25857e71.roa
File: c38b5670-ed0b-3052-9a32-65fe25857e71.roa (raw, json)
Hash identifier: 0UmG2bSN4FaFOw854LhUwDvP7WOD1/LObhtFQhnPmq0=
Subject key identifier: 54:4E:42:5B:EC:85:74:E0:C0:FF:AA:90:D4:6D:EE:15:C5:73:62:A3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28C9F788D2B02BB2661740
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c38b5670-ed0b-3052-9a32-65fe25857e71.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 855
IP address blocks: 70.26.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:c9:f7:88:d2:b0:2b:b2:66:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=0f710034-e37f-4c1e-a968-c24b3fefc8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:ec:46:61:f8:ee:88:9a:48:c4:88:e5:3d:
1e:b2:97:00:59:96:c1:bb:c6:28:ca:ff:47:47:bd:
6c:99:b0:6f:7c:68:e4:4c:57:db:d4:fc:be:14:da:
7d:75:e2:5a:9c:ce:56:a4:fe:53:33:6a:45:bc:ee:
18:42:a9:e4:27:40:bb:0c:29:f4:b9:83:fc:94:8d:
cb:9a:24:7a:21:37:71:34:0d:6a:ea:f3:cf:45:bb:
58:cf:81:ab:cf:a2:b8:42:1a:37:b1:c4:0e:0c:5a:
28:57:68:4c:60:4b:e3:e5:6c:fb:5b:a4:e1:2c:39:
f2:68:8d:84:c2:4f:62:b0:76:dd:e5:dc:c0:31:d5:
54:9e:ef:a0:cc:27:12:2e:35:19:b9:5a:bb:62:26:
5c:c1:0e:9d:57:72:b6:e8:06:ca:68:39:e4:cd:3b:
87:17:f8:98:4c:bf:0b:f2:19:74:b0:64:4b:e3:3b:
8d:ed:57:af:7a:39:84:64:c5:a2:4e:f7:29:68:0d:
00:55:50:67:d5:d7:ed:8a:c6:23:ed:29:7a:6e:b6:
8f:8d:5d:38:cd:4f:26:97:f3:25:9d:69:fa:58:ca:
1a:c9:d0:70:cd:9b:4e:16:d4:c5:ec:d6:34:b4:e6:
6b:81:81:3f:7e:35:b5:fd:87:64:64:71:56:a9:83:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4E:42:5B:EC:85:74:E0:C0:FF:AA:90:D4:6D:EE:15:C5:73:62:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c38b5670-ed0b-3052-9a32-65fe25857e71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.26.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:3f:37:e2:ba:d0:12:c0:f6:0e:38:77:d6:5b:96:3f:11:89:
ce:45:f5:6f:16:e2:93:89:2a:5d:63:0d:d4:d2:3c:4a:9d:ea:
4f:76:cb:87:9b:d1:98:37:00:88:cc:a9:c2:8e:51:eb:5c:46:
6f:d2:0a:5c:cd:3b:04:c9:92:51:02:1a:ba:a0:6e:60:f2:fc:
98:3c:96:be:5f:91:1f:57:cb:fb:f4:31:64:d0:19:1d:f0:9f:
0e:34:77:a0:5f:e6:67:ce:ee:bc:f0:5e:f0:86:88:9a:f7:bc:
a8:c1:84:4b:42:8f:13:46:d2:b7:4f:dc:25:31:62:66:c1:af:
ed:65:38:b7:86:ef:6c:b6:8b:f5:cd:c6:f7:a5:87:89:24:ba:
eb:fd:da:12:a0:67:5d:f5:19:ab:30:6a:41:9d:8c:01:02:b6:
17:53:59:02:59:41:18:d9:c9:31:fa:26:48:05:3b:e9:bb:98:
30:de:ba:c1:93:42:0f:a3:c8:a9:84:c3:e1:38:71:5d:fb:0c:
93:68:27:f8:f4:53:75:42:fc:5e:ff:94:a8:c4:07:38:91:14:
0a:d0:2a:a2:45:0a:3c:25:4b:0b:42:93:4d:cf:1b:ca:76:e4:
d9:76:05:70:d3:d1:2b:d5:bd:86:5b:37:c1:c9:3d:f5:46:17:
d8:10:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:42 2025 by rpki-client