Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa
File: b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa (raw, json)
Hash identifier: RfgILkLTd78vDobH8pVhXp01oAuaZiVTbva/y9/1H8w=
Subject key identifier: 75:AD:8B:4F:00:47:57:9C:E9:DE:75:00:27:9F:12:C6:2D:44:62:EF
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F432858485A057C81AC6B13A033C1C600
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa
Signing time: Sat 28 Dec 2024 02:00:38 +0000
ROA not before: Sat 28 Dec 2024 02:00:38 +0000
ROA not after: Fri 28 Mar 2025 01:00:38 +0000
asID: 15164
IP address blocks: 209.71.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5a:05:7c:81:ac:6b:13:a0:33:c1:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Dec 28 02:00:38 2024 GMT
Not After : Mar 28 01:00:38 2025 GMT
Subject: CN=2729c939-7536-4562-ba89-8e9d6b35c7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:e6:4d:fc:c5:46:7c:b5:94:6b:79:ad:60:
e8:5d:45:dd:c1:58:d3:e9:56:91:6e:50:64:78:aa:
81:6e:f2:08:c2:ce:37:24:86:05:7c:98:9e:c9:34:
a6:68:15:b9:eb:ff:d7:eb:94:1a:6c:d1:b1:39:95:
40:b6:9b:9b:8c:be:ff:a9:38:59:4e:74:cc:b9:b4:
ba:e8:c6:cd:b1:96:8a:61:c1:c4:aa:05:b3:88:33:
11:ca:00:c0:89:d6:c7:7e:23:c8:2e:59:b6:36:44:
8a:c5:28:55:9b:53:62:19:74:9a:b5:44:ff:7c:71:
28:3b:1c:1c:8b:96:b9:b6:d6:f9:b9:3f:3e:83:18:
11:9e:9d:c8:43:c9:90:f6:08:29:25:83:40:1f:27:
da:b2:40:e7:ee:f2:39:df:e1:8c:4e:de:b7:09:1c:
b2:24:2b:9c:5f:54:0b:26:ce:78:4d:f3:81:8a:ec:
d6:1d:54:5a:1f:6c:1e:3d:2c:4b:6b:49:22:b5:61:
ea:2e:bd:ec:a4:eb:13:04:f4:24:cb:87:d4:9c:93:
76:61:b8:af:db:20:a4:6c:26:a7:4a:2e:55:2e:fb:
ae:1b:0d:72:88:af:80:ef:05:ee:7a:fa:c8:89:25:
ac:80:cb:b9:3a:29:05:51:25:f0:e5:be:20:b0:dd:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AD:8B:4F:00:47:57:9C:E9:DE:75:00:27:9F:12:C6:2D:44:62:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:ae:8d:67:7a:c4:63:00:a5:34:e0:fd:50:24:75:e9:5c:46:
f2:24:1b:22:2b:77:cc:a3:57:2c:37:47:95:1d:d2:a6:d8:32:
f2:71:3f:f1:47:ec:a6:fd:e0:30:d0:92:9c:0c:6e:4e:9b:bd:
25:9d:b1:34:19:b1:06:31:02:99:d7:1a:04:05:69:9a:ff:90:
b3:64:70:cb:a6:ab:3a:6b:30:da:36:40:f4:cf:26:eb:bd:2a:
5f:a3:3b:94:6c:22:6b:8e:83:d6:82:6c:0a:ce:df:49:34:a0:
5e:de:93:c2:0e:2d:91:63:55:4e:52:ae:84:fe:47:f7:8d:7a:
ae:45:6d:f3:95:a0:6b:a7:2a:65:c4:8f:d4:05:a4:ba:b1:b9:
f3:96:4d:4a:a3:f4:ae:e4:a1:5e:ea:b5:d4:90:38:92:90:31:
52:b4:97:89:1a:8f:dc:d6:6d:2f:51:79:f0:a3:c0:0f:2e:1f:
08:0b:51:fb:cf:1c:76:2f:cf:70:b2:5a:1f:e6:ce:f4:fc:f3:
03:36:76:1f:16:29:9a:56:71:13:ce:7f:7e:d7:f8:c5:14:37:
85:e8:38:ca:c6:88:c2:9c:4a:4e:b2:75:a3:d9:44:ca:43:2f:
0a:de:14:32:da:c8:ef:07:8f:0e:47:d5:e9:b9:41:85:fd:1e:
d0:04:6b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:11:59 2025 by rpki-client