Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e3cdb690-a56b-4a40-a87e-a6364b48f2b3/a1c7763c-8894-32bf-adcb-0de3e015821b.roa
File: a1c7763c-8894-32bf-adcb-0de3e015821b.roa (raw, json)
Hash identifier: JtvaZTTpb9aeeNLU8ekdTFCOM13kYDOFS9Y/wCEfgxI=
Subject key identifier: B6:C8:48:0F:27:B6:AF:42:98:65:F7:85:20:EA:A5:A2:6F:D4:75:0C
Certificate issuer: /CN=e3cdb690-a56b-4a40-a87e-a6364b48f2b3
Certificate serial: 010D0C9F43285848B850A38E08A1C6DE219D8B00
Authority key identifier: 27:D2:F3:79:B9:7C:38:BD:5F:6C:50:79:6A:F8:A4:12:D1:B2:4A:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e3cdb690-a56b-4a40-a87e-a6364b48f2b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e3cdb690-a56b-4a40-a87e-a6364b48f2b3/a1c7763c-8894-32bf-adcb-0de3e015821b.roa
Signing time: Thu 30 Jan 2025 20:38:06 +0000
ROA not before: Thu 30 Jan 2025 20:38:06 +0000
ROA not after: Wed 30 Apr 2025 19:38:06 +0000
asID: 400418
IP address blocks: 91.199.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:50:a3:8e:08:a1:c6:de:21:9d:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cdb690-a56b-4a40-a87e-a6364b48f2b3
Validity
Not Before: Jan 30 20:38:06 2025 GMT
Not After : Apr 30 19:38:06 2025 GMT
Subject: CN=70bd1f92-3572-4840-9d92-7d32a03d8222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:60:40:04:07:72:7f:cc:e7:d4:95:48:c7:
ff:1f:e7:41:49:e1:e0:bb:58:61:d4:55:c0:9b:2a:
42:1f:b1:f4:91:b9:54:82:ff:25:5b:78:30:82:e8:
c4:dd:c9:48:3b:a3:8a:90:2c:b0:a2:36:d9:87:ac:
bd:5e:44:85:9c:68:d5:13:1e:38:3d:f6:79:98:d8:
75:93:0e:d9:32:2c:2e:c1:1f:5a:23:12:65:bd:be:
33:8d:dd:f5:fe:80:af:64:99:08:29:b3:51:94:2a:
58:71:bf:ab:62:e8:f4:b4:68:c5:87:f9:82:c9:01:
eb:0e:c6:73:09:e7:55:9d:60:63:bc:2f:54:78:24:
5c:3f:31:fd:4b:f3:c1:7a:8a:6f:f5:58:7e:77:43:
00:1a:59:37:d9:ba:4b:7d:5e:2d:12:d8:e4:64:45:
db:85:39:53:eb:fc:61:5d:b3:01:87:15:d4:6b:6b:
bc:50:24:07:36:1e:75:18:6d:de:63:28:6c:7e:30:
8c:4c:6a:5f:1b:6f:53:87:bd:b2:09:67:0b:03:7a:
dd:d4:c7:ae:4b:3a:c5:af:c9:6a:63:1b:ad:0c:8e:
c9:68:24:6f:67:d1:a9:e8:af:37:06:5a:8a:70:59:
2a:b4:a9:60:70:5c:6d:84:2c:ad:a3:d3:6f:a2:5c:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:48:0F:27:B6:AF:42:98:65:F7:85:20:EA:A5:A2:6F:D4:75:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e3cdb690-a56b-4a40-a87e-a6364b48f2b3/a1c7763c-8894-32bf-adcb-0de3e015821b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e3cdb690-a56b-4a40-a87e-a6364b48f2b3/e3cdb690-a56b-4a40-a87e-a6364b48f2b3.crl
X509v3 Authority Key Identifier:
keyid:27:D2:F3:79:B9:7C:38:BD:5F:6C:50:79:6A:F8:A4:12:D1:B2:4A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e3cdb690-a56b-4a40-a87e-a6364b48f2b3.cer
sbgp-ipAddrBlock: critical
IPv4:
91.199.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:21:dd:9d:46:ea:ed:5a:1c:6f:8f:2a:d1:23:96:3a:67:fb:
d8:47:30:61:43:e5:e4:cc:6b:6a:84:0c:14:3a:f0:55:4b:d4:
20:20:45:02:8b:4e:f9:98:01:ff:fe:4d:f3:9b:e9:d7:2b:a9:
7a:af:7e:75:ca:a3:6c:df:e9:b2:fa:e1:b1:c2:eb:5e:22:7f:
f1:3f:e9:63:c5:fe:98:e9:42:70:ce:89:b3:29:15:d8:d9:3c:
c0:c6:ff:77:6e:c6:b5:3d:cd:d0:f9:c1:04:2b:c8:8b:c6:2a:
2c:81:25:f4:cb:f9:ee:bc:a9:83:ad:b8:53:8e:ba:3e:0b:a0:
3f:53:13:00:19:c3:f2:29:72:2f:1f:c0:26:b2:2f:ea:7e:66:
86:ff:2d:08:e6:15:df:91:ae:4e:22:80:9c:eb:15:05:25:c7:
16:c0:57:b9:38:7c:4f:8b:94:72:a4:48:95:c8:69:90:68:d8:
88:9b:8d:db:ee:9a:c5:d1:cc:ee:24:4e:4f:eb:31:46:33:31:
bc:a7:03:0b:3e:03:25:c1:ea:e7:98:b0:44:14:de:b2:b4:fb:
4d:b9:47:a8:2b:49:4d:b5:90:eb:03:d9:86:93:78:6f:8f:85:
5e:74:11:ab:21:74:cd:50:5a:d8:6a:e0:a6:8d:49:5c:a9:1f:
4e:b5:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:21 2025 by rpki-client