Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa
File: 9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa (raw, json)
Hash identifier: JLFgQr3GJVv50e3jZRWCEncDOXnjoIkdZ0cxwvfOJZk=
Subject key identifier: 99:F5:9A:D9:FB:9D:3B:46:B0:D2:DE:29:30:B6:DF:04:CE:8E:AE:29
Certificate issuer: /CN=91b93de6-6446-4623-a181-5425af4f85cb
Certificate serial: 010D0C9F43285848A1360F4CD0F92650ED778F80
Authority key identifier: FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 36459
IP address blocks: 140.82.112.0/20 maxlen: 24
143.55.64.0/20 maxlen: 24
192.30.252.0/22 maxlen: 24
2620:112:3000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0f:4c:d0:f9:26:50:ed:77:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b93de6-6446-4623-a181-5425af4f85cb
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=ca99d265-cebe-4222-9e28-e0f48aba15cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:90:15:55:83:69:61:7e:b4:4f:ad:3f:bf:
64:ff:c1:07:82:af:df:05:a7:96:43:4c:8c:58:e6:
27:99:bf:b8:6b:45:92:ef:d8:05:73:d4:8d:64:45:
b7:5e:9c:d3:12:63:ee:49:d7:bc:cd:9e:6c:6a:50:
27:19:5c:f3:0e:e1:83:9f:3a:6b:d5:f7:49:f3:5c:
1d:14:32:37:48:78:1d:23:f3:22:ed:b9:e0:31:07:
c4:24:2a:f5:88:67:d3:e5:f2:82:97:c7:04:03:87:
aa:f0:6c:ee:7a:86:d6:1e:03:91:9c:ee:28:7e:d2:
57:d1:46:ae:4c:06:4d:29:f1:d6:79:5f:f5:ca:dc:
a3:f2:6a:db:eb:06:b4:4b:5a:82:3d:fd:96:57:06:
c4:f8:09:d1:c0:a7:a0:7b:71:d5:b7:c4:10:bb:30:
2a:c6:2f:30:6c:08:6e:84:b2:85:1f:1a:90:d0:45:
48:8b:7f:b6:51:7c:b0:9d:94:24:06:e3:d1:b0:2f:
16:29:c7:b9:f5:5e:15:06:c4:95:bc:8d:01:a0:45:
8c:43:a5:9d:d0:73:33:d9:55:4c:42:fd:65:c4:53:
ca:ae:87:08:de:99:22:5c:ad:c3:7d:e1:3c:90:7b:
3a:e9:a7:54:1c:93:81:d5:f7:5f:b7:52:15:b0:30:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F5:9A:D9:FB:9D:3B:46:B0:D2:DE:29:30:B6:DF:04:CE:8E:AE:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.crl
X509v3 Authority Key Identifier:
keyid:FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer
sbgp-ipAddrBlock: critical
IPv4:
140.82.112.0/20
143.55.64.0/20
192.30.252.0/22
IPv6:
2620:112:3000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:1b:ab:2d:a2:68:4c:70:8c:52:03:d7:7c:3c:07:ee:b3:d2:
17:85:b3:65:2d:1a:f1:43:62:c7:42:80:71:31:82:a7:db:2f:
fd:09:e1:d7:6e:0a:1c:75:fe:9c:5b:bb:89:be:b0:4c:38:1d:
b7:08:9a:56:6b:0b:a5:93:0c:3a:aa:6f:ea:89:53:1f:3b:09:
e0:86:d7:28:be:9d:b3:76:aa:ed:b6:3a:31:db:3f:75:b3:64:
4c:a7:16:be:d8:02:98:54:dd:4e:85:e6:73:7c:31:fa:43:08:
20:81:eb:fe:c1:50:e8:3e:1f:6f:14:42:84:df:32:11:b6:29:
19:bf:f9:0f:10:66:31:b4:04:92:34:ae:1f:a6:d1:62:80:4f:
f6:d9:cf:d6:31:22:17:5d:41:77:eb:0b:d5:50:ac:77:0d:b1:
01:4a:8f:93:a3:79:eb:ba:4c:5e:f5:10:02:b6:1d:1a:0d:95:
b9:0c:0a:08:4c:87:68:28:f4:9c:8b:d6:f7:6f:9f:84:91:93:
6c:4c:11:4d:70:2c:3a:70:4c:20:eb:c9:f1:ca:b1:9a:b0:70:
1e:21:76:47:58:b1:05:49:90:01:4c:51:6f:e8:39:bd:c7:9c:
e5:e1:3e:f2:99:b4:6a:5a:9b:b4:a9:66:c9:d4:b1:3a:68:28:
ce:30:70:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:06 2025 by rpki-client