Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5a94e139-6432-37da-ad9a-9a58e43133b8.roa
File: 5a94e139-6432-37da-ad9a-9a58e43133b8.roa (raw, json)
Hash identifier: jEnJJqbv0qExw3J6X3QfCtl8ZLOfdtgMOsOj1JVsbTk=
Subject key identifier: DA:76:8F:71:0A:B0:52:EB:41:EC:86:6E:BA:07:FA:62:61:A9:D3:D6
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F432858489075F37EB9F41ECB89E90A40
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5a94e139-6432-37da-ad9a-9a58e43133b8.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 14041
IP address blocks: 204.132.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f3:7e:b9:f4:1e:cb:89:e9:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=004f4901-b83b-4e2c-b84b-d8d8b6732a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:ac:d5:3d:a4:93:da:0a:86:eb:7e:29:d8:
0c:4c:a4:83:10:f9:3c:e7:28:15:86:3b:32:3d:f5:
e6:61:ee:3f:d6:e2:c2:fe:4f:a3:f1:25:18:c7:f7:
50:ed:95:50:26:3f:0f:78:a0:1b:ab:63:75:64:e6:
1d:f4:db:e6:d9:9a:5f:da:d4:93:98:28:77:bf:fc:
79:5c:79:96:0d:d2:b8:7f:b4:1a:0a:41:ea:b4:2b:
7e:ad:ea:98:3e:c8:a2:5b:f2:35:8c:97:9b:39:96:
c8:58:7c:d6:b9:51:5e:8f:99:e8:f0:34:54:5b:a2:
62:13:30:26:50:3d:9b:c7:f8:95:49:b6:da:4b:34:
f7:b6:5a:14:c6:4e:af:57:82:f0:f2:e5:dd:c7:74:
2c:ca:cc:a5:91:5c:40:ec:02:3a:9e:5b:41:c4:a3:
80:f1:e3:79:ac:b1:1f:2b:67:bd:ec:1e:3e:62:ca:
e2:6d:66:ca:22:36:aa:3d:53:b2:4a:89:61:0b:d8:
71:0d:67:74:94:02:ba:5d:67:1b:04:44:1c:5c:38:
cb:ff:8c:2f:32:c0:db:a7:88:12:46:aa:a8:d7:ce:
cd:8d:42:46:ff:bc:48:e2:8a:a4:fc:bf:9f:33:2a:
2b:07:60:e6:3b:bf:c9:7e:46:94:e9:e2:8e:08:8c:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:76:8F:71:0A:B0:52:EB:41:EC:86:6E:BA:07:FA:62:61:A9:D3:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/5a94e139-6432-37da-ad9a-9a58e43133b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
204.132.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:1f:00:b5:2d:ba:ee:6a:c8:04:d2:35:1c:6d:d3:99:c0:27:
78:37:4e:57:eb:6a:de:26:8f:25:88:2a:f0:fe:91:88:b6:7e:
12:a5:e3:a0:cc:19:38:eb:03:3c:c3:0d:88:4e:1c:70:98:94:
4c:59:17:e1:b6:c8:0f:c4:e7:79:f8:ae:d9:c9:8a:28:0a:05:
b4:51:6a:82:ed:26:d2:f3:35:0f:91:45:ec:70:8f:49:b7:4d:
d1:f7:fb:d6:67:71:b0:75:22:7c:95:99:2f:69:3b:b7:3b:79:
4e:7d:5d:8c:d6:c0:6d:48:23:5f:99:cb:61:2a:fc:61:fd:54:
5e:06:41:68:94:30:03:47:f7:e5:39:95:9f:aa:56:fa:61:ce:
7b:1e:20:3d:a3:bb:57:8b:88:ac:71:41:a4:42:52:40:58:77:
aa:fe:20:60:38:44:07:6e:ae:c5:30:a0:96:3b:6e:03:d9:21:
c3:1e:e4:4e:ec:e2:38:1e:19:a0:81:1f:06:ce:63:5e:10:e1:
a0:a7:5d:b1:d2:11:cb:a0:a9:c5:f1:6a:b8:76:cb:1d:8b:c6:
00:d5:1e:dc:dc:e5:7b:0f:44:83:a4:3e:9e:97:0a:e7:9b:0a:
7d:f0:32:f9:83:23:54:54:76:8c:fb:4d:9d:69:37:22:33:43:
9a:ac:9f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:58:46 2025 by rpki-client