Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cec84195-962b-3c98-8153-71da9b60b160.roa
File: cec84195-962b-3c98-8153-71da9b60b160.roa (raw, json)
Hash identifier: EAd5j5jtDoNEeh93T2P5ZLd3hIOm21XK/VtyQK1BhyU=
Subject key identifier: 43:DB:63:39:69:0B:03:A0:00:5A:9E:21:DE:2C:8C:B0:A0:98:C1:5B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4B74537FB1A8407AC3080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cec84195-962b-3c98-8153-71da9b60b160.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 855
IP address blocks: 142.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:b7:45:37:fb:1a:84:07:ac:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=14d89634-b67e-4ce3-9e14-ad76e3c05a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5e:af:24:90:99:78:42:a3:5c:b8:d3:bb:f6:
8a:5a:60:81:7e:47:ca:19:25:18:db:e2:20:89:6e:
13:03:87:b0:65:92:ef:df:c2:5f:6a:a5:88:82:62:
0d:41:f1:af:73:9e:e3:2a:04:28:0d:68:8a:35:9b:
32:6d:97:f3:dd:9f:5e:33:e8:d8:9a:74:63:46:5a:
17:dc:ac:fc:40:53:d5:84:ab:92:ca:91:19:e8:9e:
5a:21:eb:1c:56:9f:6a:5d:73:43:af:e1:20:4f:ff:
52:c5:37:21:20:f9:20:53:09:fc:58:62:3f:78:d5:
6e:be:eb:a5:97:d8:94:24:9b:a5:4a:36:fb:ce:53:
5d:31:c4:c1:7e:d3:d3:a2:c6:45:39:d4:05:53:3a:
0c:01:5d:09:91:06:7d:bb:4a:6f:ff:1d:42:29:a8:
fc:50:cc:3d:d7:71:bd:68:47:63:97:28:14:01:47:
28:aa:60:8c:b3:f9:95:96:3d:fd:e6:f5:cb:9b:c6:
c6:b1:a5:dc:36:13:14:85:30:bd:1c:05:d1:ba:3f:
f3:46:ac:3f:b1:44:2d:2c:2f:a5:93:1d:09:d7:0d:
3a:03:6e:37:38:ba:ac:f2:2a:42:06:2f:dc:67:62:
e7:c6:a7:64:43:5b:8e:ed:31:53:80:29:29:83:bf:
25:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DB:63:39:69:0B:03:A0:00:5A:9E:21:DE:2C:8C:B0:A0:98:C1:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cec84195-962b-3c98-8153-71da9b60b160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:06:8d:36:c9:57:18:54:87:8e:f4:e8:8a:85:05:6d:3b:42:
cf:9c:5d:90:67:94:09:fe:ec:94:69:b4:85:c2:85:9e:d4:14:
d8:7e:2d:30:7b:d2:4f:3b:df:a9:57:68:5c:03:83:f1:d8:83:
85:d3:d1:8f:bc:2d:3b:aa:7e:f8:ca:2b:c8:a0:c9:14:37:05:
bf:12:c1:9b:68:7d:f3:54:a8:77:f4:29:ef:f7:e0:34:96:86:
9b:a1:d8:b6:7e:c1:25:3e:8c:3e:c9:38:be:38:50:f7:61:e6:
a2:4d:67:da:8a:2f:18:a9:7f:09:da:20:9f:e1:6f:5b:34:06:
d8:e9:5c:08:cd:28:40:f5:85:63:c6:0c:3b:83:15:18:6e:d8:
ce:db:94:3d:a5:47:9d:ea:df:17:51:31:9e:fd:98:0d:c5:0f:
4a:43:97:43:3b:cf:eb:e8:7e:94:16:8a:7c:31:d9:c7:80:ef:
be:46:6c:f3:9d:cd:4a:62:cc:66:97:37:53:9e:a8:3b:1b:20:
97:cb:7a:67:6b:e5:c4:46:2a:89:f7:f9:1f:12:46:e5:73:af:
1e:c1:0f:b5:2f:45:54:0d:bd:1e:8d:73:14:3e:c3:ad:12:5e:
2c:f6:ea:26:c6:73:42:70:6b:c4:c0:f2:f5:8d:e2:d4:39:15:
c3:32:b0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:37 2025 by rpki-client