Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa
File: 38c17b7a-0754-332b-ad37-ba79d152d002.roa (raw, json)
Hash identifier: kvoqrU1UjP6sZEw89IHaLzQ4KigVo7NOUqQuWaYsK1k=
Subject key identifier: 96:9A:AD:7A:18:FA:A7:15:D6:F9:5B:0D:14:BD:DC:66:45:15:CA:10
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F432858480214F35605CBF7CDE2357040
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 399726
IP address blocks: 204.144.180.0/24 maxlen: 24
204.144.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:f3:56:05:cb:f7:cd:e2:35:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=040c7096-874a-4396-b3bc-01a106497a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:6f:ea:6d:b4:61:53:64:81:d6:63:39:3d:
05:99:e6:b1:dd:87:ff:4c:45:13:db:3f:b7:47:78:
68:12:cc:10:09:b6:3c:89:ee:b9:46:08:e3:b0:72:
80:86:5f:27:c5:73:5a:3a:42:d0:1e:7c:6a:a0:6a:
2e:ca:0f:4d:0a:96:a5:f6:c6:f2:2c:68:39:4b:c5:
22:ca:f8:b5:20:c9:64:da:8d:32:0f:8a:19:86:8a:
60:03:ff:fd:59:a5:84:da:6a:03:bd:c7:8e:d6:5b:
44:e3:e8:7f:15:60:38:47:3a:18:94:f3:26:4f:79:
10:7c:ef:a1:59:ca:6e:f0:f9:c5:82:ff:2d:82:8b:
96:ae:14:53:5a:e9:9a:e4:3d:cf:14:71:8d:7a:ae:
76:fe:b1:5f:0a:e1:e1:5d:08:a2:08:c3:4d:8c:91:
52:66:02:a3:e4:8b:74:e2:d2:a5:f4:4f:d0:23:cb:
4c:86:cc:ee:e7:3d:3a:f7:8c:9b:72:42:6b:7e:4a:
24:d9:f7:16:dc:95:7e:5b:46:f2:a1:2e:85:76:40:
46:b3:dc:a7:b8:36:b3:6f:73:4e:b4:db:07:04:24:
e8:53:27:b2:b2:0e:c4:ac:35:9c:a9:eb:5f:75:3f:
83:ca:48:49:44:ce:54:1e:80:37:6d:a4:18:48:f3:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9A:AD:7A:18:FA:A7:15:D6:F9:5B:0D:14:BD:DC:66:45:15:CA:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.144.180.0/24
204.144.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:a8:a7:a7:66:0b:65:80:03:33:10:1d:94:a1:55:1c:b7:b9:
dd:27:37:78:bf:b4:20:c9:64:60:78:d3:4a:e0:f9:58:a5:71:
4a:f7:10:5b:8a:ad:7c:64:28:cc:bc:cf:6f:c5:88:a3:a0:f6:
41:73:a0:f1:47:d0:5c:21:f0:69:4e:76:7a:b6:ca:a1:ab:f3:
2c:ad:af:bb:23:98:d5:4b:d6:52:a8:12:4a:46:79:d8:a0:bd:
f9:8f:26:15:f5:47:00:b7:12:e1:8b:0b:cb:29:8d:1b:f6:97:
40:d8:83:fc:90:09:f5:70:37:ce:df:ee:14:db:bf:81:60:28:
05:bf:5c:58:fb:a1:ba:b6:b5:41:fd:18:9a:d9:da:c4:a2:e4:
ea:e7:d1:8a:93:58:2a:52:95:ba:13:d0:54:67:3f:ad:1c:6e:
03:5b:d9:9d:70:b8:da:b7:a3:8e:c9:17:c2:86:df:32:a6:85:
44:ba:ef:00:2f:3f:2d:66:60:9c:76:72:a2:58:58:2c:18:0f:
de:16:01:e8:52:6f:21:c7:4e:83:64:71:11:00:0f:29:41:84:
d9:cb:6c:37:6a:cf:6c:9b:f5:fe:e1:61:32:9c:cb:22:18:53:
3e:38:69:76:63:74:4f:9e:a2:92:e0:e7:74:6d:5f:0c:16:91:
18:1d:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:41:30 2025 by rpki-client