Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa
File: baf36f1f-7681-3019-9422-c187c0a3a355.roa (raw, json)
Hash identifier: wvz5T+LYH3XTCEzUnMy1WacUNpO/NBB0dJMtDGALA/A=
Subject key identifier: 73:86:82:6D:02:D1:F9:65:C3:56:EF:3B:30:42:06:67:71:DD:86:87
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F43285848AFBAD2337C2B8C4E5192A800
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa
Signing time: Mon 27 Jan 2025 18:49:46 +0000
ROA not before: Mon 27 Jan 2025 18:49:46 +0000
ROA not after: Sun 27 Apr 2025 17:49:46 +0000
asID: 15164
IP address blocks: 173.244.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:ba:d2:33:7c:2b:8c:4e:51:92:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jan 27 18:49:46 2025 GMT
Not After : Apr 27 17:49:46 2025 GMT
Subject: CN=f5a2b49c-16d7-44ae-b7c6-9c0365c3b1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:12:b3:7a:85:d2:09:65:9a:9d:63:14:ff:
f1:55:1f:68:59:be:70:53:9b:ee:53:32:bb:c2:cb:
e1:83:70:99:57:ed:6a:a8:8f:52:5c:1f:c2:c8:0d:
4b:cd:ff:74:64:af:65:26:4c:95:05:5b:c8:a9:ad:
b7:ec:88:60:3f:ee:05:17:9e:0a:a3:80:65:f8:15:
6e:ba:e2:7e:11:84:6f:e6:b7:8f:b5:ba:03:00:97:
71:b4:41:06:e3:15:03:9f:29:3f:b7:1a:7e:f2:6a:
40:2f:60:fa:6a:4c:ef:39:62:8c:b9:94:b5:ca:27:
16:59:21:63:44:79:7a:1a:87:54:47:70:29:aa:7e:
4b:eb:78:c5:00:ea:d3:31:34:64:08:e7:83:7d:d5:
ce:ef:fa:ab:2b:57:be:5e:df:b6:e1:10:87:e5:b6:
7c:18:13:7c:1b:89:8c:b2:5a:5c:0e:a2:56:b3:87:
99:85:e5:3e:71:72:f0:3f:46:8a:ba:f8:55:68:1e:
14:db:81:ec:0a:72:f1:61:b2:4c:c6:28:47:af:69:
bd:34:a8:02:32:33:a6:4f:59:22:aa:18:74:25:fa:
14:e0:92:aa:ee:73:b1:99:7a:a2:b6:2e:a3:0d:41:
06:ac:06:73:64:03:c4:87:d4:b8:67:03:48:2a:20:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:86:82:6D:02:D1:F9:65:C3:56:EF:3B:30:42:06:67:71:DD:86:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
173.244.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:78:72:cc:dc:b3:41:d0:a2:14:15:c9:66:ca:8c:67:ca:e4:
56:1d:df:da:40:b2:f5:05:35:d9:60:75:d2:62:ad:66:94:1f:
66:a0:04:d5:17:32:c4:d5:6b:0a:ab:4f:87:6f:cc:99:86:2d:
69:03:56:13:4f:60:ad:4c:8e:25:d2:cd:df:7f:2f:5e:19:1d:
28:e5:1c:c7:64:dc:bc:9e:ea:0e:d1:8e:04:f0:18:e8:e0:83:
79:97:ea:72:95:61:c0:b7:75:52:ce:43:58:16:15:21:3d:4a:
2b:cc:cc:b1:cc:09:21:55:2a:c8:6d:bf:38:6a:04:61:1f:e1:
8e:67:fa:a3:b0:a4:47:df:aa:ea:e8:a8:ad:e4:ec:e3:57:0b:
c8:b2:40:00:89:ee:6f:4b:dc:c8:b2:4e:04:f8:87:77:b4:96:
c9:87:7b:07:97:15:28:0c:e3:9f:b3:54:cb:ef:8b:de:b8:fb:
21:ac:8e:00:5c:88:8f:33:34:0e:d2:1f:66:30:87:2b:df:b8:
54:c2:13:b0:bf:af:17:29:03:aa:15:a0:f6:0f:bd:f0:18:f3:
ed:45:aa:65:12:43:f1:a5:ca:b0:bf:cc:f8:0c:8d:17:0b:69:
1d:f1:c3:55:af:12:17:1c:59:ed:12:38:f9:54:64:5f:6b:3b:
f8:91:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:45 2025 by rpki-client