Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa
File: 4c26d07a-6a10-3283-bc4c-d335313f9d53.roa (raw, json)
Hash identifier: mb9umMqy/QPrWoqBPYtqG7dgmn1IJLgrLdluKhlSRhY=
Subject key identifier: 7B:78:51:EC:85:BA:35:9B:35:C6:5B:47:E2:30:54:67:62:CA:23:09
Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial: 010D0C9F43285848F926A7ED3D893480A73D4900
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 7922
IP address blocks: 121.91.208.0/20 maxlen: 24
121.91.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a7:ed:3d:89:34:80:a7:3d:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=44f8898b-2ade-4e39-9abc-c94532a54481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:c8:3a:8e:c1:16:d1:e6:c9:c0:3d:c6:94:
1a:06:9d:6c:30:0a:f3:48:6b:5f:57:ba:30:e2:93:
96:64:6b:b3:69:fa:da:23:b1:ff:16:88:de:67:81:
6c:61:57:5a:24:d0:5c:29:d3:03:e3:cf:c2:4d:0f:
73:db:f2:04:4a:7e:ae:61:07:0c:2a:57:87:6f:cb:
64:db:aa:78:2f:41:14:86:87:a3:b9:24:30:dd:71:
c1:db:c3:0b:1e:f4:fb:1a:f4:72:87:5c:4b:07:3f:
e8:9b:98:a6:40:32:df:96:ef:25:60:34:2f:9f:c2:
1a:b7:a6:19:56:ec:1d:f9:30:16:2e:a3:ac:07:9e:
35:09:b0:63:ce:3f:c6:2b:31:65:f1:0f:d1:8e:e7:
17:2c:81:0c:31:c9:20:9f:5a:32:6f:4d:4d:e6:9c:
d3:be:f4:58:c4:54:da:a8:9b:88:63:42:ac:31:a9:
4d:13:f4:0c:57:18:da:5c:8a:62:a8:b4:91:8f:0f:
fe:db:6d:ec:b7:1b:c8:69:49:8a:c7:7b:5b:2b:b1:
8e:dc:6e:af:e7:fd:3a:39:a3:13:cb:bd:a8:b0:db:
a5:3d:96:20:7d:fb:66:0b:ec:f4:11:1a:03:20:98:
8c:70:25:db:82:9f:0c:8a:90:0f:40:f6:dc:a6:8c:
41:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:78:51:EC:85:BA:35:9B:35:C6:5B:47:E2:30:54:67:62:CA:23:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
X509v3 Authority Key Identifier:
keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
sbgp-ipAddrBlock: critical
IPv4:
121.91.208.0-121.91.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:49:f0:7e:49:26:6b:52:a6:d1:09:47:96:35:21:a0:d3:84:
98:7e:50:25:99:7d:89:78:61:d7:06:01:c2:8b:b0:78:fd:ee:
da:10:32:9c:5e:08:54:40:c9:06:19:e4:22:49:ff:13:30:6d:
bb:d0:2a:86:55:d3:61:c7:b1:10:5b:5f:bc:c7:41:39:cb:13:
58:48:63:2b:0d:55:9b:ed:4f:ac:53:a0:4c:39:63:e8:c7:16:
33:43:47:da:9d:c8:e4:4e:0e:c2:8e:06:97:34:c3:af:24:3d:
c3:f2:b1:05:7a:b3:7a:bf:1d:8e:2c:2b:75:6e:4d:ea:f5:1c:
30:87:66:3a:c3:36:4d:6a:28:b6:8d:19:9d:f9:1a:f9:8b:a1:
60:3f:35:50:dd:54:12:70:73:0d:a8:dd:0c:cb:d3:19:e0:96:
85:ab:56:45:95:4f:f1:46:cb:d3:b8:d8:2d:bd:6e:ed:12:7b:
b9:42:5e:e8:b8:20:05:c9:5b:5e:bc:fd:85:d7:a1:27:71:0e:
8b:28:57:09:b7:d7:6e:71:32:f1:6a:ec:00:0e:42:ed:3a:54:
9e:ef:34:87:b1:b4:8c:bd:49:e8:32:f8:27:48:7c:60:00:11:
7d:8f:16:d0:5e:09:8b:35:1b:9a:fe:b6:76:7b:e9:18:ed:b4:
7d:00:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:47 2025 by rpki-client