Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa
File: d9a7402a-c4dd-3778-9808-b7317aeceb81.roa (raw, json)
Hash identifier: 4+Tx1BdbCtLZaYSB6eYCP4FCTqMlPxgNlP+dEjIyAF8=
Subject key identifier: 4E:14:1F:4A:D0:A6:66:B2:41:C3:D9:81:F5:14:94:9B:DB:2C:CD:A0
Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial: 010D0C9F432858492728B96450C3DEBFC39EC700
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa
Signing time: Tue 11 Mar 2025 13:32:24 +0000
ROA not before: Tue 11 Mar 2025 13:32:24 +0000
ROA not after: Mon 09 Jun 2025 13:32:24 +0000
asID: 42689
IP address blocks: 121.91.208.0/20 maxlen: 24
121.91.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:27:28:b9:64:50:c3:de:bf:c3:9e:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Validity
Not Before: Mar 11 13:32:24 2025 GMT
Not After : Jun 9 13:32:24 2025 GMT
Subject: CN=3c279b26-5c86-446a-b31f-3c9fe1d57f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c9:f3:fb:10:d3:c1:50:95:db:6a:92:a5:ee:
da:e6:33:92:1d:90:35:8b:dd:cd:a9:1f:c7:68:f4:
e8:3d:49:6a:50:92:1c:af:c6:14:7f:c4:00:f8:1f:
e8:55:d4:5e:76:26:68:41:5c:d2:10:ad:32:5c:91:
72:be:48:b1:2b:7c:29:e5:0e:90:a8:6a:47:4f:84:
a7:3b:b1:ce:c2:d6:ad:c3:e6:61:82:45:84:fc:b1:
cd:a6:20:32:b0:a3:77:0c:cb:ef:29:b2:20:c4:55:
a5:4a:5d:79:c0:54:c0:ca:78:14:bd:69:9c:54:33:
bc:da:b3:4f:ea:26:93:0e:ae:17:eb:4a:5a:d5:30:
05:86:4c:ba:70:de:5c:c4:d7:fc:a4:19:7b:a9:07:
e0:c7:9f:96:ae:bb:76:2d:45:cb:04:51:ac:84:09:
05:21:b3:a5:07:42:7f:7f:9b:0d:04:11:f0:9c:ee:
b0:88:f3:7e:2e:80:aa:32:0f:15:8d:df:dd:d3:af:
d5:b6:b7:85:48:81:71:c1:cc:c1:87:5c:85:5d:e7:
24:f8:d9:02:d3:6e:08:6e:34:5f:f5:8a:2f:44:04:
17:7d:75:ef:2f:8d:a6:ab:d6:dc:2c:ec:d8:1e:c4:
ed:8b:0f:d7:97:66:1d:b6:a6:7b:44:dd:69:f6:be:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:14:1F:4A:D0:A6:66:B2:41:C3:D9:81:F5:14:94:9B:DB:2C:CD:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
X509v3 Authority Key Identifier:
keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
sbgp-ipAddrBlock: critical
IPv4:
121.91.208.0-121.91.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:c2:1f:c5:e8:19:5c:ef:51:0d:cf:5a:f4:13:08:34:5e:fd:
01:10:f7:df:a5:80:a2:99:b9:c0:6f:f8:4c:4c:a3:bf:b4:53:
2a:57:56:2d:e4:42:e2:dd:c0:64:45:96:27:b2:fe:56:c8:11:
7a:48:4f:88:71:ad:a4:5e:97:db:69:0b:7f:7c:8c:b7:49:6a:
85:f5:9f:df:4c:fd:a5:f9:aa:c8:b6:8b:50:4d:68:92:ca:dc:
e8:e0:f8:1d:46:80:5e:92:f5:02:1d:b7:19:62:d8:d5:b5:07:
b6:79:de:41:9c:94:8c:e6:b3:88:88:55:08:29:bb:ff:a4:46:
3e:1c:49:7e:b2:ed:ed:44:3a:b5:9c:37:7e:f5:ec:02:5d:59:
08:9e:f8:3c:28:3a:b8:a9:87:83:69:dc:59:b4:f5:75:f8:94:
4f:4c:da:f3:7c:2a:7a:7d:27:80:8f:13:1b:b7:82:84:5e:eb:
0e:c9:2b:b3:72:79:73:92:1e:1a:6c:c6:ca:89:52:3e:bc:96:
f5:84:83:6c:4c:ae:47:c7:dd:b6:f6:6b:6b:1d:33:95:45:03:
25:68:0e:cf:b8:2b:f3:b9:92:76:1f:e2:97:76:b3:c8:21:3a:
cf:65:ac:77:31:58:19:27:4c:16:b2:26:77:a2:60:d3:39:53:
58:14:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:57 2025 by rpki-client on console.sobornost.net