Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5871508-e036-3804-9759-80432f0ea35a.roa
File: d5871508-e036-3804-9759-80432f0ea35a.roa (raw, json)
Hash identifier: NjHKiXHY33OGPNPut75xM16sr5EHorU5LNWa7FqXhww=
Subject key identifier: 9F:76:C0:F4:58:19:CB:7F:4A:76:B3:2B:FD:4B:B6:D4:89:E0:A6:72
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921346CCBEFF3D51E60338700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5871508-e036-3804-9759-80432f0ea35a.roa
Signing time: Sun 09 Mar 2025 10:21:08 +0000
ROA not before: Sun 09 Mar 2025 10:21:08 +0000
ROA not after: Sat 07 Jun 2025 10:21:08 +0000
asID: 36522
IP address blocks: 216.208.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:6c:cb:ef:f3:d5:1e:60:33:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:08 2025 GMT
Not After : Jun 7 10:21:08 2025 GMT
Subject: CN=efb1d3f0-2752-4e3e-9a08-02ffb549beb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:01:06:30:fe:79:3b:65:4f:d2:81:cf:e9:
a9:24:d1:a3:27:2c:7f:9d:58:80:0e:71:3b:b4:e7:
cc:12:26:51:3f:8e:74:42:ed:4e:1d:30:54:b3:44:
2e:87:e4:b6:02:17:04:25:c1:0e:e5:2b:e6:37:24:
80:74:8d:84:36:7f:cb:06:94:f1:6f:b8:f4:46:52:
8e:14:4d:6a:17:26:b5:00:1e:07:6d:ee:1e:ae:e0:
6b:b7:47:8e:50:3b:8f:de:3c:07:20:89:83:73:32:
9d:a4:e6:09:f2:20:f9:1e:ca:6f:b1:1d:af:d2:b8:
ee:14:c1:d9:3d:7e:b1:42:ec:93:c4:c7:bf:c0:05:
31:74:1e:ce:fa:8d:8e:b1:f6:fb:4a:b2:35:6f:55:
d0:64:f9:dd:85:6f:1b:ba:a1:a4:fa:82:6a:0c:53:
ad:69:69:70:7b:a9:71:b8:92:55:0e:7f:fe:17:cd:
96:0a:15:d8:bb:7f:f4:86:0a:14:9a:4c:3b:40:55:
4e:de:7e:17:4d:e4:bf:26:ae:58:8f:79:4e:74:97:
84:56:31:50:e5:1b:c6:1c:e1:bf:fb:d6:f9:2a:cd:
b8:5a:fb:c4:4e:f1:4d:1f:57:c9:76:29:b5:87:ac:
8f:77:6a:9e:3e:d2:b3:87:b1:f1:98:92:03:53:27:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:76:C0:F4:58:19:CB:7F:4A:76:B3:2B:FD:4B:B6:D4:89:E0:A6:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5871508-e036-3804-9759-80432f0ea35a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:7b:03:c7:41:3a:73:38:35:e7:9e:80:b9:05:8f:31:f3:fe:
17:6a:0e:f6:ed:eb:a2:ad:3a:8b:7c:a0:cf:3c:6c:dd:ca:8a:
01:7d:5b:2b:1b:5d:f3:aa:a2:b4:20:94:b0:3c:5a:be:aa:07:
88:4b:f5:c1:7b:73:c7:7a:01:e2:76:1c:f3:36:0f:10:87:af:
e6:89:c4:4f:80:c1:f2:8e:6e:dd:f7:37:4e:c5:53:d8:b1:2b:
04:ae:ad:2f:b6:02:f1:3e:c3:80:21:96:cc:94:16:6b:9a:2b:
4c:13:4c:3c:1b:21:fd:41:10:c2:e9:44:f3:c0:db:7f:d7:a3:
96:a3:fa:31:43:36:58:c5:a7:f8:27:ec:12:28:26:de:3b:d4:
ff:21:83:8f:2d:83:8f:87:df:77:08:8f:37:be:c6:d6:6f:5b:
9f:3c:3d:8d:95:f5:bf:f5:94:68:a1:d7:ef:66:ff:3e:51:c8:
a3:cb:38:ee:0e:c0:84:8c:32:90:b3:c9:86:4c:db:23:96:0c:
ba:a2:93:37:34:13:ee:91:a5:b5:27:f2:ab:f7:16:14:b4:80:
66:d7:bf:5c:94:c6:f8:88:87:ef:ab:5e:78:a5:02:71:43:be:
6b:9d:18:5c:c5:5a:75:8e:62:7d:14:0e:90:ba:09:39:98:93:
16:14:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:38 2025 by rpki-client