Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e459c9e2-87c5-38a0-936f-a0fc401eefea.roa
File: e459c9e2-87c5-38a0-936f-a0fc401eefea.roa (raw, json)
Hash identifier: gOtlJPERRMKDwi9ecNkc33+OWVXV12cVQHLiMfN3lX4=
Subject key identifier: 56:05:FB:CA:9A:DD:7A:45:AF:47:DA:21:E5:71:A9:5F:E9:A8:74:67
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343CC96BBB45E00A4BFF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e459c9e2-87c5-38a0-936f-a0fc401eefea.roa
Signing time: Sun 09 Mar 2025 10:20:45 +0000
ROA not before: Sun 09 Mar 2025 10:20:45 +0000
ROA not after: Sat 07 Jun 2025 10:20:45 +0000
asID: 36522
IP address blocks: 204.101.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:3c:c9:6b:bb:45:e0:0a:4b:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:45 2025 GMT
Not After : Jun 7 10:20:45 2025 GMT
Subject: CN=34b9ac70-9d6b-4362-a644-fa2e1521989d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:bb:89:9d:c8:b3:27:71:16:fd:79:ca:53:
81:5e:cb:2c:48:44:9c:f7:2b:01:69:4d:d6:b1:cd:
d8:c1:38:7e:df:53:88:75:ed:61:49:b6:b6:94:70:
14:9f:4f:02:41:39:d0:e0:7a:24:90:f9:7c:cd:5a:
74:9b:d9:92:99:ff:47:e7:61:4f:f7:65:45:dd:3f:
e5:b6:d8:1c:d9:7b:06:fe:e8:2b:6d:1a:b2:0d:b6:
be:47:3c:3b:47:02:13:30:66:8d:67:3f:45:a2:d9:
d1:84:5d:bf:ca:5c:98:6e:aa:90:37:dc:25:ec:96:
bd:d4:0e:cb:15:a5:de:9e:50:ba:b0:2e:1b:6d:81:
30:41:bc:42:08:e1:2a:08:50:79:2f:f0:77:ce:55:
0d:ec:c1:7e:5b:e3:0d:93:c6:6d:2b:94:86:c5:c6:
1c:69:1e:b7:4b:a2:d5:eb:88:d6:81:bc:d5:af:91:
65:3c:9e:75:72:5c:da:db:96:de:e2:03:d1:8c:84:
15:cc:d0:5f:6a:05:30:99:ff:f7:31:81:23:38:c9:
49:69:08:38:96:be:93:66:b7:b4:6f:cd:dd:15:16:
13:77:77:3c:4f:ec:91:87:54:88:ee:e1:d5:a1:0c:
71:54:95:b9:30:aa:bf:fe:aa:eb:56:fa:bc:10:aa:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:FB:CA:9A:DD:7A:45:AF:47:DA:21:E5:71:A9:5F:E9:A8:74:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e459c9e2-87c5-38a0-936f-a0fc401eefea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:8f:a9:c5:e1:9d:95:73:01:35:f3:ad:85:8c:04:4b:7a:c2:
d1:36:7f:f5:8d:b9:7d:be:5b:28:7c:e5:a0:6f:f7:c6:7d:17:
f0:d5:92:32:3f:57:dc:f1:54:a2:b0:8b:02:41:f9:b5:15:28:
11:62:a4:99:98:13:84:f4:ab:e5:e0:08:6c:6a:58:57:5c:71:
b8:6a:bb:61:e8:23:77:fe:a0:53:4c:0b:13:ac:7b:3b:f4:56:
1d:12:db:0c:0c:a3:b3:d3:da:95:48:72:b5:a3:51:55:e9:83:
d7:cc:08:70:3a:14:82:15:dd:45:8d:d8:c8:17:46:4c:74:ec:
3f:f0:f9:35:cc:24:4c:00:c4:3c:63:91:21:7b:c9:4f:b7:1c:
e9:f1:83:a0:de:90:30:04:7c:ed:bb:25:9e:0a:12:bb:e5:ff:
b1:9a:99:70:59:18:c3:50:c5:d2:28:29:cc:17:8a:3d:f3:3a:
aa:f4:4d:2c:64:3b:0d:f8:33:ab:d0:ce:b4:5c:57:ac:83:cc:
be:b1:09:eb:b5:0b:41:91:2a:da:08:40:50:a8:0d:78:5c:b0:
a2:9b:08:d2:b6:8d:80:21:f3:62:25:bb:dd:ad:00:ac:66:11:
fa:9d:92:5a:1c:01:c3:4e:12:61:01:07:69:61:e6:84:18:6d:
93:58:8b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:42 2025 by rpki-client