Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa
File: 61f3e7bb-3cef-3819-a71f-ff3645a33210.roa (raw, json)
Hash identifier: Qt7H8R4nZ0qnT4yBT32kaPd5IpyEVl66OAgUYvDgVhM=
Subject key identifier: 82:1D:83:B8:8A:DA:4B:9E:83:3C:71:7F:42:59:44:0A:FF:5A:86:70
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F432858481C9A8E02BE8CAB26FBF66A40
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 20303
IP address blocks: 69.91.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8e:02:be:8c:ab:26:fb:f6:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=6b099029-2030-4b15-825c-362389a86dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:d1:8f:de:24:8e:d5:31:a9:17:19:d6:ad:
12:cf:76:2a:c2:c3:a3:c0:8d:2b:dd:54:d3:9d:25:
6b:25:a3:b9:e0:18:99:9b:92:e6:e1:a3:83:78:c1:
d8:48:b0:67:ed:20:a1:37:d0:04:50:91:b6:8e:d6:
87:d8:1e:be:0f:2c:e3:76:ee:9e:43:f4:64:90:58:
c9:46:5e:46:c3:44:cc:a5:13:15:e4:4e:c0:0a:2d:
ee:75:c4:7d:1c:b0:7a:53:47:df:a4:21:26:07:3b:
78:30:fc:40:78:4e:f0:53:6f:18:59:ae:cc:a6:a8:
51:c8:62:66:78:2d:b5:b4:87:d4:9c:36:79:1c:ce:
b6:e4:9f:ad:a4:0a:23:f1:6a:e8:ed:c7:fc:6a:b4:
61:d1:fc:0e:a0:92:da:5e:1b:59:df:6f:57:76:1e:
74:ca:fd:04:57:94:62:53:60:70:3c:c5:f4:d0:af:
16:a6:14:f9:61:38:4f:06:6c:eb:d5:2c:53:4a:c8:
4a:5d:88:0e:da:86:e8:db:36:53:66:83:f9:50:81:
da:d0:19:d8:18:16:c2:94:78:be:00:ab:26:a9:53:
1b:91:6a:d8:6f:70:8f:b9:a0:a7:ca:e5:fb:83:e3:
b6:a9:74:ce:98:0c:a8:70:86:1c:cb:63:00:4a:40:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1D:83:B8:8A:DA:4B:9E:83:3C:71:7F:42:59:44:0A:FF:5A:86:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
69.91.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:53:f1:d9:37:e4:c2:16:2b:9d:8a:bb:17:25:81:0e:37:eb:
7d:1c:24:a1:67:60:39:b4:23:cd:e0:90:14:ef:4a:2e:22:57:
a3:4a:60:96:b7:dc:df:60:81:72:8b:1d:d3:0e:8d:1a:23:d5:
7b:ae:82:43:16:a5:e8:96:64:08:28:bf:3a:c6:d1:ad:2f:aa:
fa:e8:55:2b:22:89:af:da:f7:4f:99:8f:e8:d3:e1:1d:dd:cd:
cf:a4:13:dc:ab:a6:de:17:39:3f:7a:a7:a8:b2:57:12:e9:af:
84:b2:b4:8c:b0:31:e2:4f:c7:74:87:29:43:a2:80:6f:b8:1d:
a2:79:74:28:87:fd:52:15:77:ec:77:4b:8c:d9:19:ed:bc:34:
de:83:43:55:25:d8:c6:00:41:20:88:9c:16:10:4c:e9:35:a6:
67:a0:4e:6c:c4:9e:97:f2:80:c4:e3:95:05:ba:d2:71:03:64:
73:b6:f0:27:9d:0a:17:7b:c6:f1:69:13:f4:ed:08:0f:ec:25:
d4:45:8a:9e:92:7a:81:2c:29:6c:ed:e6:a0:4a:91:9c:ce:a8:
2f:43:21:ee:0f:8c:e7:bf:a3:6e:79:7a:dc:6e:2a:df:58:ab:
9c:4d:1c:bc:e5:23:8a:04:b1:74:23:50:ef:7d:ad:c3:20:17:
a8:f4:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:43:31 2025 by rpki-client