Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5211078-0366-399b-97a7-5753d087e8d3.roa
File: c5211078-0366-399b-97a7-5753d087e8d3.roa (raw, json)
Hash identifier: +94mMesnQ9/CTk81Kif849KfvDbujepQczVYn9GBlSU=
Subject key identifier: 2D:B1:74:04:09:6B:1D:D7:DB:FF:83:30:FC:04:17:44:26:D7:C1:66
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B545499EF2C917520D1440
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5211078-0366-399b-97a7-5753d087e8d3.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 70.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:45:49:9e:f2:c9:17:52:0d:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=4a14412c-d48c-4ce5-b47d-b9254d87490e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:af:61:43:7f:6b:3b:fb:a9:8d:74:22:57:
a8:a6:63:c4:7d:64:ee:57:84:69:a1:59:f1:5f:73:
20:3e:12:91:0d:39:e5:02:69:ec:12:39:13:cd:21:
65:0f:9f:84:27:fd:94:27:23:26:77:1d:9e:78:99:
68:6b:7b:9e:f6:a3:83:31:3d:bb:f5:d9:cb:e5:ac:
f2:d3:0c:d5:5a:e4:d9:d8:80:22:10:87:50:4a:8b:
b3:f9:e1:19:3d:d7:f3:40:9a:21:dd:24:76:c9:c0:
d9:f0:1b:a0:2c:a2:ac:c4:d6:c2:03:4a:c6:cc:45:
35:fe:fa:9d:d1:e5:bc:8e:ad:5b:ba:86:32:f4:40:
7d:47:37:bc:ef:de:52:cc:15:8a:86:1c:63:47:6b:
fe:43:f7:ba:fa:74:30:c2:ff:78:09:59:c9:04:22:
e6:de:bb:3f:9c:1a:0b:03:0e:7e:3f:81:e8:7a:cc:
ea:49:95:ab:9b:32:0c:fe:4b:e7:61:95:7d:bc:67:
9c:d0:d1:c1:1a:5c:f8:91:a7:5b:21:0a:b4:bd:bc:
d2:a1:ef:bf:b8:91:07:1e:e4:c7:24:66:4a:11:c5:
ea:24:34:da:8e:04:72:14:22:8d:f9:eb:ef:42:11:
f8:44:83:13:a0:a6:65:8f:47:09:ba:b1:72:79:37:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:74:04:09:6B:1D:D7:DB:FF:83:30:FC:04:17:44:26:D7:C1:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5211078-0366-399b-97a7-5753d087e8d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:09:a6:72:4b:dc:21:8b:4b:b0:9a:e7:16:52:0c:9e:f7:1b:
60:a7:07:48:12:4d:5e:b0:53:d3:34:d4:21:a9:c3:27:7a:ed:
82:71:ff:84:28:3c:b5:c1:9c:52:78:dc:6a:74:b3:a2:b6:ff:
ed:bc:93:4f:ba:82:fc:43:97:82:6d:82:f8:3a:e7:48:5c:6f:
83:61:3b:d4:ae:64:d2:28:55:89:e0:7c:30:37:44:ab:82:03:
88:63:0e:1a:96:27:0a:03:c3:51:0c:d4:d9:52:12:a3:3d:b7:
0a:c1:65:b7:55:fa:c4:93:0c:93:f0:8f:8e:79:a5:17:b6:1c:
51:f5:50:3a:3f:5c:f9:14:76:10:33:6b:cd:6d:df:9d:bb:62:
d7:7c:34:c3:17:1d:0c:ca:c1:a1:ef:82:7f:d1:cb:5d:aa:68:
67:9a:38:05:b2:b2:12:b5:3a:b4:b9:dc:af:9e:35:c5:8f:a9:
2d:18:41:c7:7a:46:10:ac:9c:e1:06:15:89:93:bb:e4:14:e8:
38:54:e4:f4:ae:1b:74:c4:e6:3d:ec:10:53:57:5a:ee:29:b6:
6b:91:79:5f:55:f5:9d:67:f9:8b:71:d5:5c:fa:38:40:8a:55:
49:a8:fb:47:f7:04:b9:e8:30:a7:dc:10:73:9e:30:f3:09:ce:
61:a8:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:38:07 2025 by rpki-client