Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c965a724-c4de-336f-8a53-949c52b703a1.roa
File: c965a724-c4de-336f-8a53-949c52b703a1.roa (raw, json)
Hash identifier: sf3+TbpBWeqUxNmSFDCe1bgHo/nWFu6Qq6ObyS/Jt2E=
Subject key identifier: 24:94:72:C4:14:8C:00:B7:5B:A1:75:AA:88:E3:EF:44:AA:A4:85:71
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134313420A0BE7DFA694800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c965a724-c4de-336f-8a53-949c52b703a1.roa
Signing time: Sun 09 Mar 2025 10:20:40 +0000
ROA not before: Sun 09 Mar 2025 10:20:40 +0000
ROA not after: Sat 07 Jun 2025 10:20:40 +0000
asID: 577
IP address blocks: 142.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:31:34:20:a0:be:7d:fa:69:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:40 2025 GMT
Not After : Jun 7 10:20:40 2025 GMT
Subject: CN=1a68cb19-08cb-479f-871c-fd77524df1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:38:ad:f4:b1:f0:58:cb:08:a7:76:f1:91:
9c:04:4f:0a:80:ab:d4:23:d3:e9:05:e8:33:17:7c:
88:3b:2d:55:39:ec:c7:fd:77:f7:8b:25:3c:4d:0c:
84:86:25:95:73:50:11:5d:13:1e:3c:a8:6f:55:83:
2e:cb:a2:1e:e3:e6:c9:b8:d5:3c:58:6f:e0:8f:8e:
9a:8c:49:fd:1e:d8:bb:28:b1:b3:e1:50:78:39:d4:
7b:30:18:3c:93:d1:44:e4:38:d6:f9:f9:6b:50:3a:
64:95:80:dd:57:e6:97:a5:e3:d6:a6:67:eb:9b:9b:
80:4d:db:39:0d:ab:85:0b:31:07:3b:78:8e:5f:04:
d7:9c:09:2c:16:fc:6d:03:fc:f9:ad:fd:ee:51:82:
f0:07:d5:59:f1:29:39:03:c5:e0:1a:b4:a1:68:1b:
9d:b2:ba:c3:95:25:9e:c8:dd:62:e9:2c:9a:64:0e:
f5:33:ed:5e:94:83:62:6c:2b:7b:f3:1a:28:3c:48:
6b:12:09:01:d6:1a:6b:6e:d6:92:6c:3d:f5:2b:69:
13:cd:09:cb:19:8a:c6:c2:af:87:d0:17:10:b0:06:
6e:3a:b1:fc:1a:55:a2:c2:7b:e4:4e:41:ef:3a:7c:
bb:cf:5e:7d:ea:05:ce:a5:ba:af:70:70:a4:6b:df:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:94:72:C4:14:8C:00:B7:5B:A1:75:AA:88:E3:EF:44:AA:A4:85:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c965a724-c4de-336f-8a53-949c52b703a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:2e:ee:c8:a5:a9:74:10:80:a8:e9:69:14:b7:16:6b:5d:f5:
8c:e5:9f:c9:b2:44:5d:21:9e:94:2c:09:29:38:a7:ee:99:20:
84:cb:34:7c:1e:74:20:99:44:99:66:18:cf:68:c9:13:a4:8e:
77:42:88:c2:d4:8a:a1:ed:7a:86:d0:4d:dd:fd:b3:f9:06:c3:
66:74:8b:b1:e6:b0:13:ac:f9:b8:74:63:8a:0f:1f:ec:b2:5e:
c8:a4:cf:3c:e3:42:74:e5:a1:4b:7b:fb:d4:75:97:ea:6d:a9:
b4:2d:e6:db:31:20:ba:99:3f:af:93:68:96:18:44:55:2c:1a:
38:16:d3:9c:9b:0c:3e:d3:d2:54:29:ba:e0:50:22:fc:a3:98:
5e:d3:94:13:bf:d0:a7:4f:fd:27:aa:b0:d0:f8:9e:d6:05:1d:
ca:6d:08:aa:3b:26:46:b6:06:fb:bf:9c:67:ed:10:7c:05:3f:
5e:cc:b0:da:31:f9:14:81:c8:fb:1b:9e:12:13:f3:80:7d:cd:
8a:d6:22:b1:19:0d:e0:38:e0:d3:4d:f6:ea:1a:68:3e:a1:60:
e0:96:f2:df:ca:51:7e:31:7a:f0:68:ca:0d:fb:ec:55:bf:57:
c0:da:aa:bc:b9:fa:96:ec:0a:b0:d2:65:46:1a:e9:c5:cd:71:
ae:ef:96:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:34 2025 by rpki-client