Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/625496d5-12d9-371d-a507-f48468438087.roa
File: 625496d5-12d9-371d-a507-f48468438087.roa (raw, json)
Hash identifier: 6ConBuVVDE+PT5TB4KnHFV02CQZle7pDnIdODZpL0ME=
Subject key identifier: 32:DE:69:AF:07:5B:CB:A3:08:6B:DC:40:B6:34:B9:D1:15:C7:7C:27
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F43285848A487AE2B5E193ED84E3F3E40
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/625496d5-12d9-371d-a507-f48468438087.roa
Signing time: Thu 23 Jan 2025 18:32:50 +0000
ROA not before: Thu 23 Jan 2025 18:32:50 +0000
ROA not after: Wed 23 Apr 2025 17:32:50 +0000
asID: 15164
IP address blocks: 138.199.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:87:ae:2b:5e:19:3e:d8:4e:3f:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jan 23 18:32:50 2025 GMT
Not After : Apr 23 17:32:50 2025 GMT
Subject: CN=d6f70226-b025-4d21-88e4-8818f10533db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:24:fe:d0:6b:7e:51:17:bd:80:29:7e:e3:
b3:8a:5a:62:c2:c1:f5:6e:7e:ca:3a:a7:04:d8:e3:
a3:36:e3:84:f9:77:7b:d8:92:01:09:36:02:a9:06:
98:b1:16:99:5a:57:f7:fd:3a:87:0c:f0:04:6a:37:
14:d1:6a:33:dd:f5:9e:09:ea:49:82:27:5d:1e:68:
89:22:ce:c5:ff:f6:73:9d:a7:e0:0e:80:2b:65:11:
70:80:74:89:45:f5:8e:f2:9e:9b:9f:4e:bd:87:ae:
ab:35:2e:7e:d8:a1:ae:e7:f7:51:cd:7b:73:83:41:
e7:1f:79:2a:6b:76:42:54:2c:27:97:ed:f9:56:6e:
33:63:da:2d:82:25:e3:6a:b6:6c:00:8d:69:81:cd:
e4:82:64:12:82:ee:70:41:05:9d:72:c5:9a:7d:b8:
53:a5:de:94:fd:12:0f:be:9e:f0:77:55:85:56:54:
af:25:3c:10:a8:fb:3e:f1:7f:ce:9c:a9:3b:a2:5c:
20:3e:0b:ae:6c:9a:49:19:eb:1b:1a:c8:c9:09:82:
3e:ac:c9:66:2a:9e:39:a5:8a:e9:48:aa:32:f4:c5:
27:9a:98:05:12:94:63:45:b9:dc:69:e8:cc:c4:ad:
91:4a:29:a7:3a:e1:3c:02:5b:a3:d7:0e:bf:3a:78:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DE:69:AF:07:5B:CB:A3:08:6B:DC:40:B6:34:B9:D1:15:C7:7C:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/625496d5-12d9-371d-a507-f48468438087.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
138.199.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:0b:65:8a:9b:e6:5d:90:66:16:64:bc:f7:28:6a:1b:81:39:
4a:3e:c0:9a:d8:78:91:0b:f0:b9:67:f3:55:5c:26:f3:0f:dd:
d7:35:ed:f6:d6:ee:a3:9b:91:d3:5b:ff:44:94:97:92:59:cc:
7d:be:2f:48:8c:e5:66:28:da:2a:d7:ad:4f:ba:0a:2e:b0:1c:
9c:37:04:7b:53:71:60:8a:b9:93:62:0f:b6:3c:f9:48:9a:89:
e4:be:b6:cf:4a:b9:b6:c2:29:6e:32:66:bc:60:61:8c:a8:e6:
a5:2c:76:67:38:74:60:5d:5f:35:cf:91:e2:4e:c8:cb:db:6e:
ed:9d:06:12:3b:d8:e9:d1:3a:3b:e7:27:54:3e:a1:1a:fb:80:
0a:0a:d1:04:cd:33:86:f4:57:7c:48:e3:be:ac:3b:66:ba:3f:
8f:44:83:ea:48:c4:8c:b9:79:e8:7d:2c:43:d7:9c:03:c1:25:
65:5d:78:14:d3:33:27:e4:90:da:d8:3b:e0:be:65:7f:d3:d3:
9d:5d:45:59:37:27:ac:59:f0:2b:b6:9f:50:57:9a:40:5b:47:
75:63:dd:88:a9:59:06:d0:21:d8:3a:82:37:f0:16:85:10:b5:
38:c3:bb:a4:f3:3d:48:27:2b:59:09:6d:68:da:c3:b0:03:3f:
ce:56:8c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:29 2025 by rpki-client