Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ceaccc67-dbce-3f81-8ee8-d3edb9604ffc.roa
File: ceaccc67-dbce-3f81-8ee8-d3edb9604ffc.roa (raw, json)
Hash identifier: a5UNHY1qapJO4BCn2A9WpcY4w40yTkQoDYT6+jl+eis=
Subject key identifier: 78:BA:0B:AD:9A:22:DC:64:C0:EB:AE:A3:CC:63:B0:CB:15:78:44:E5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343FA16C7AF9232B80DEA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ceaccc67-dbce-3f81-8ee8-d3edb9604ffc.roa
Signing time: Sun 09 Mar 2025 10:20:46 +0000
ROA not before: Sun 09 Mar 2025 10:20:46 +0000
ROA not after: Sat 07 Jun 2025 10:20:46 +0000
asID: 36522
IP address blocks: 204.101.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:3f:a1:6c:7a:f9:23:2b:80:de:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:46 2025 GMT
Not After : Jun 7 10:20:46 2025 GMT
Subject: CN=705d85b8-1d28-4665-8926-c455745327ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:c6:2e:4e:47:97:2a:e7:80:db:92:df:c6:
9f:61:84:f8:5e:3f:c8:be:b3:be:a2:6d:a0:8b:b8:
ce:d9:c0:37:71:f8:e4:9b:13:2a:26:e0:df:eb:d2:
ca:2d:19:c7:f6:05:c5:0c:7a:73:50:31:45:a5:4c:
c7:73:ce:65:c7:62:32:8f:87:7f:15:6a:49:c9:a3:
01:c3:62:05:8d:39:4b:b8:ab:19:42:a0:c6:51:64:
05:24:20:1a:16:44:33:66:02:6d:80:23:22:3a:16:
e3:d8:5c:0b:30:eb:87:28:be:4d:15:43:66:08:8c:
cb:7f:b7:47:36:f4:9a:85:f8:a2:b6:31:8e:c1:0b:
0d:f1:0d:6f:39:59:c5:9c:2c:3f:02:bc:fa:78:84:
c4:74:61:0b:b3:e8:e6:95:41:6e:91:66:af:5c:06:
6a:94:54:ff:65:8e:d9:18:87:7e:20:7c:48:b2:0f:
cd:e2:4b:78:9f:19:2b:c5:e4:4a:c4:ad:6f:8e:79:
24:5b:d6:44:2b:79:6d:f8:00:8d:08:d3:f9:48:53:
e5:1b:89:49:db:bb:cb:29:35:c5:b3:72:fc:4f:dd:
8e:7b:59:ff:37:8a:33:f0:e2:10:3d:55:f9:42:50:
94:71:92:74:52:da:fe:71:78:6e:66:d1:b0:36:44:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BA:0B:AD:9A:22:DC:64:C0:EB:AE:A3:CC:63:B0:CB:15:78:44:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ceaccc67-dbce-3f81-8ee8-d3edb9604ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:8d:96:5c:f1:2f:3e:4b:c5:9b:24:48:79:3d:85:fe:df:9a:
45:ea:e9:ac:2a:cf:a4:84:70:8b:67:20:3a:b1:cf:97:c0:21:
a2:ad:65:a0:86:2b:e6:a5:07:c5:55:29:d8:b4:73:4c:eb:a3:
33:69:6d:e9:c7:49:73:87:44:03:68:5c:80:d4:78:f9:7e:20:
0a:d1:4d:92:54:2e:63:58:81:a2:92:78:b0:6f:fc:a1:95:4f:
26:04:36:01:26:aa:56:f9:1b:3b:20:8d:a8:16:06:09:be:c3:
6b:08:fd:55:c6:3c:52:1f:d6:ca:03:90:67:ea:10:7b:3e:a1:
32:87:fb:d7:2d:ad:0c:d3:fa:09:e7:e9:5c:40:a7:ba:c8:38:
64:54:67:8e:3b:de:f6:03:b3:a0:be:07:5c:1e:27:6a:4a:9a:
a1:13:06:a5:fe:4e:b0:c4:a4:2a:85:8a:3f:33:26:93:cf:4a:
c1:01:51:5e:95:bf:1d:46:61:02:6c:4e:4f:5b:31:a0:a5:e2:
72:1a:f1:ba:bf:a0:7d:f4:5f:76:12:f3:ed:f3:5e:eb:0f:0e:
7e:92:09:bb:13:f1:4a:a6:ef:f3:46:2d:ce:80:59:a3:99:4f:
1f:31:ec:29:f8:fb:e9:24:e6:67:cf:41:0f:98:2d:b4:58:95:
0d:fe:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:36 2025 by rpki-client