Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/3b72b9a7-c4a6-319b-9831-aa287f623b34.roa
File: 3b72b9a7-c4a6-319b-9831-aa287f623b34.roa (raw, json)
Hash identifier: yNo8NXL2FVWsqiKbOlt30AdwzCNKwdVcRlLFf12dvJw=
Subject key identifier: A4:9C:3C:FE:0A:2D:E9:4F:A8:02:EA:81:2A:CA:99:11:BF:E1:3D:95
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F43285848AFC050587D5903AF45ED45E0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/3b72b9a7-c4a6-319b-9831-aa287f623b34.roa
Signing time: Mon 27 Jan 2025 19:00:50 +0000
ROA not before: Mon 27 Jan 2025 19:00:50 +0000
ROA not after: Sun 27 Apr 2025 18:00:50 +0000
asID: 15164
IP address blocks: 199.200.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:c0:50:58:7d:59:03:af:45:ed:45:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jan 27 19:00:50 2025 GMT
Not After : Apr 27 18:00:50 2025 GMT
Subject: CN=085abf32-f259-40a3-a1fc-c9034967e47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:5b:b7:02:96:84:2f:0f:2c:a1:a9:23:63:
91:34:64:22:8c:ff:15:8c:9b:27:a7:1a:07:4e:0f:
b7:8a:66:4f:cd:07:f7:15:5a:e4:0e:58:05:97:75:
3e:b8:63:31:2f:0e:84:04:51:42:d8:6e:c2:a2:36:
4f:f3:df:9c:d8:50:54:48:e4:77:38:6a:61:c3:29:
c9:98:ff:3e:02:ca:c4:53:f2:0d:4c:5d:c9:48:3e:
f7:37:f9:b7:42:b5:d0:e8:0f:b0:98:a9:61:a4:ab:
8d:f3:6f:19:63:92:ea:76:05:0c:87:ea:b6:06:ba:
9c:ed:8c:b3:ec:76:67:22:2c:eb:95:51:31:ce:8b:
a4:13:dc:c1:08:e6:e0:0d:89:81:61:50:63:15:a2:
fb:75:ca:7b:cd:86:6f:f5:12:a6:f6:99:9e:2e:31:
03:38:ad:7d:68:95:8e:7c:54:44:25:86:7f:13:00:
8e:89:5f:37:1a:54:ff:89:d5:47:fe:bd:a6:67:b9:
29:38:16:cf:cd:7b:86:6e:b3:b5:aa:79:f7:73:44:
74:91:e6:85:e6:29:b1:57:70:7d:76:ed:4a:34:87:
ce:87:8d:1e:85:e4:0e:3a:25:ed:5d:4f:07:8c:fe:
73:7e:49:02:0a:8c:d7:5a:59:fa:85:01:ae:70:7b:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9C:3C:FE:0A:2D:E9:4F:A8:02:EA:81:2A:CA:99:11:BF:E1:3D:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/3b72b9a7-c4a6-319b-9831-aa287f623b34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
199.200.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:3b:5e:b5:6c:b7:4a:34:95:97:7e:b8:b9:2d:62:43:d7:8f:
1d:33:d7:7b:01:6d:02:b0:0d:e8:4d:9b:e6:84:16:6a:3d:5b:
95:0c:60:4c:29:71:5c:c0:4b:77:85:cb:3d:1d:2d:82:da:3b:
8e:58:09:f7:e2:68:91:d1:ea:9b:20:36:46:34:5a:36:f3:b9:
e9:49:87:5e:ca:6d:9f:1e:7f:cc:3f:f1:61:62:96:fa:12:f0:
7e:d4:a6:59:e9:c9:50:ef:19:62:58:01:6a:7f:c0:85:a3:32:
59:70:fc:b1:f1:41:8c:1e:5c:93:fe:5d:26:24:77:d5:5b:e1:
cb:97:5c:92:00:0a:64:fa:6c:e8:45:66:e3:bf:81:19:a8:e7:
f6:b7:ad:61:65:d2:e2:06:9d:12:c7:49:52:bb:b7:2d:1e:0b:
7f:79:ed:d1:36:be:c3:c0:db:30:0e:f2:45:8c:7a:2e:26:ac:
69:6b:dd:22:ed:0e:b8:63:1e:05:bd:88:35:28:9c:b4:86:27:
b0:35:17:03:47:a1:f2:98:a8:61:cf:f5:8d:25:49:39:42:20:
ca:0d:36:ba:b3:95:41:20:38:9a:24:06:d5:26:63:57:6c:c5:
a4:c2:4b:a9:c6:52:e2:d6:f7:18:a4:49:78:9a:02:95:ed:8c:
cd:a0:c1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:49 2025 by rpki-client