Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa
File: 3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa (raw, json)
Hash identifier: kqGGbxD8kdQ9px8BnoHJybO/meLIXnFyK5+w2QUiCZk=
Subject key identifier: 81:2C:71:91:D5:A4:09:42:5D:CA:DF:25:E5:D8:D4:FF:24:39:A6:F9
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584839EABEDE13DEB56C2AD4C140
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 1225
IP address blocks: 128.241.192.0/21 maxlen: 21
204.2.140.0/22 maxlen: 24
2001:418:3ff::/64 maxlen: 64
2001:418:1439::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:be:de:13:de:b5:6c:2a:d4:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=adb83d62-56b1-4b49-9e22-3806a9b64af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:ee:74:7f:b8:13:2f:a3:d9:15:2f:b1:57:
7c:a8:49:e6:4c:f7:d2:19:b6:6f:15:4f:28:be:0a:
a6:2e:e0:c7:6a:3c:d9:79:50:20:19:a6:8c:7e:ea:
04:69:ac:be:0d:f7:b3:00:4f:a5:06:61:1d:f8:c2:
b5:a3:6a:75:f2:c9:61:01:dd:5e:fc:61:fa:80:9c:
a4:3f:b3:9d:6f:02:c1:7f:89:bf:e1:d9:f1:f1:2d:
39:e6:de:30:2c:d8:d9:54:54:84:85:04:31:21:ef:
42:79:c7:e6:22:56:85:11:89:ec:f2:34:fc:cc:49:
1c:89:c5:7c:d2:2f:68:26:9f:69:03:e1:e9:05:53:
39:8b:a8:3a:28:88:6c:e4:a7:e1:59:14:c4:c3:ea:
06:27:a5:c1:48:2f:09:8d:0a:c8:9b:78:ba:ba:2a:
f9:e7:ea:1f:f9:9c:27:99:f1:96:b9:13:43:37:40:
2c:7f:04:d3:f3:91:8e:8c:c3:e5:69:01:a3:8d:51:
76:b1:1a:5c:e1:f7:10:fd:57:f0:2a:18:19:00:a5:
af:a6:27:1b:1f:d7:45:ba:f3:61:5e:07:5d:24:f6:
6e:fd:88:e6:f3:9e:3e:c0:16:4f:ac:e0:23:a1:f7:
6f:0b:c0:fe:0c:7b:27:71:56:53:72:2e:e1:da:65:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2C:71:91:D5:A4:09:42:5D:CA:DF:25:E5:D8:D4:FF:24:39:A6:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.241.192.0/21
204.2.140.0/22
IPv6:
2001:418:3ff::/64
2001:418:1439::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:0b:4e:7f:79:07:50:35:40:98:5c:cd:21:bd:1c:ab:51:c8:
cb:89:b0:bc:f3:cb:e5:eb:93:4b:7b:10:d5:c0:69:f9:c6:78:
74:1a:dd:a4:e5:35:7c:eb:51:fa:5e:69:6e:7e:43:8c:80:b4:
d2:15:ce:e8:02:47:fc:0f:77:33:65:67:1c:e4:c1:08:56:a1:
63:62:54:4f:3b:73:db:bd:6f:65:42:74:01:28:05:8b:5a:9c:
35:6c:f4:a3:3b:a3:26:87:c9:ff:db:b2:79:12:76:7a:fb:27:
f1:3f:e1:7c:54:67:53:3c:f2:0c:a7:d9:67:d1:9f:53:b8:1f:
55:c2:7f:5e:13:43:9e:f2:b9:89:df:14:3f:79:8e:db:ee:78:
9b:c8:55:4b:ab:13:75:85:b5:de:3b:21:6d:5b:62:be:1f:0b:
40:d7:9d:fa:08:03:14:d7:02:63:52:30:b7:9b:59:6d:ff:37:
d0:1d:b1:54:31:17:2a:e7:11:6d:14:46:97:8f:c7:7d:a6:19:
48:e4:57:bd:86:37:2a:c3:96:f4:10:a1:13:cb:23:c3:da:8a:
d8:c2:62:e9:85:13:62:20:5f:4d:56:45:83:8f:db:ae:f2:d2:
8e:68:4a:39:49:95:bb:c5:c1:61:96:80:50:85:b7:77:d8:16:
4c:2e:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:12 2025 by rpki-client