Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa
File: 91cf1c00-289f-3473-9f95-b903e535a230.roa (raw, json)
Hash identifier: lB2niWPROV+C93vE+ZdyrY4ZERcB4UX18V0CuR7AM20=
Subject key identifier: B7:92:32:35:23:29:DF:EE:1A:2D:4E:37:34:55:B3:7E:91:32:8F:76
Certificate issuer: /CN=9b7383ca-74b1-4e8a-b79d-f791e631c059
Certificate serial: 010D0C9F43285848D211363C1F40249361355F00
Authority key identifier: 48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 22056
IP address blocks: 204.153.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:36:3c:1f:40:24:93:61:35:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7383ca-74b1-4e8a-b79d-f791e631c059
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=43f9a291-375b-458a-8ffa-9855445d2a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:47:03:44:4a:52:2c:3d:ba:4c:1d:64:54:
df:01:c9:05:45:2b:be:ab:e1:82:d8:18:d6:76:9f:
82:5f:5f:1e:b7:dd:12:53:f6:cb:71:d3:0f:86:b1:
10:4c:f3:77:bb:4b:22:e6:35:0d:88:d1:cc:a4:b9:
17:04:2e:b8:2b:d6:dd:e3:26:4a:b6:89:d9:fc:4a:
8d:56:2b:ab:27:e7:e9:ad:d7:00:de:63:07:c5:1b:
87:a5:16:38:2f:b9:f9:6e:9a:e5:81:03:90:e0:e3:
68:b5:42:da:f9:0b:8c:62:35:ae:b2:91:96:57:78:
af:59:06:68:7e:9c:dd:30:44:68:78:bf:18:b6:02:
e6:b7:81:59:00:8e:dd:a8:50:fc:9d:78:44:3f:85:
d8:99:8d:72:ec:39:e9:c2:39:e0:6e:05:fa:3e:4c:
3a:76:ef:b5:57:36:58:08:3e:9c:7c:e1:d1:41:91:
fd:9a:c1:4e:28:b6:2f:fd:aa:6d:bc:60:ac:e6:43:
53:0a:9f:a2:b9:75:d7:be:72:12:84:9f:9f:af:7f:
18:68:36:1b:9a:99:5a:f6:d1:cf:78:95:30:b4:c3:
4e:cd:74:33:d0:db:c4:c6:6a:09:df:04:cf:d5:15:
24:20:49:74:f0:6a:d9:be:78:1b:6b:6b:4a:4f:5d:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:32:35:23:29:DF:EE:1A:2D:4E:37:34:55:B3:7E:91:32:8F:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.crl
X509v3 Authority Key Identifier:
keyid:48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer
sbgp-ipAddrBlock: critical
IPv4:
204.153.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:16:a8:0e:49:8e:b9:ac:da:5b:ce:d7:3a:c3:6d:45:4c:d6:
4d:78:fc:a0:f5:1f:51:52:c8:12:5a:21:e4:79:99:95:a4:e5:
91:83:24:56:7f:46:aa:98:17:9c:a9:28:3f:eb:53:9c:18:9a:
f2:d2:f7:ae:cd:62:f8:4f:42:69:97:a2:65:24:51:9e:d1:59:
ce:7c:29:98:a9:ed:64:c3:8c:f3:2e:93:a1:63:9e:a1:02:f3:
b9:82:70:47:9e:47:9a:07:29:f5:84:27:81:68:75:ae:72:7e:
bb:5b:76:02:81:62:22:34:d1:28:dd:56:e4:33:11:ff:9a:45:
46:12:25:03:00:18:22:a8:54:37:a8:20:3c:5e:25:6b:aa:53:
d1:de:de:f1:ba:1b:83:80:cc:4a:6c:48:bc:bc:14:fd:4f:c0:
de:29:ca:70:e1:89:e5:7e:cc:70:6f:6d:59:3d:96:15:de:6d:
ce:17:ff:05:98:d6:ca:c2:b6:e1:be:21:6c:8e:61:02:b6:31:
c0:33:e7:c5:d7:1e:4f:76:c0:e5:13:46:c1:16:fc:f4:fd:7d:
7e:c7:4c:c0:21:c7:94:ac:44:af:fb:60:01:4b:79:f1:9c:7e:
04:23:44:34:c6:95:ea:92:61:a1:bf:32:3f:16:1b:14:3f:cb:
9b:56:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:15 2025 by rpki-client on console.sobornost.net