Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/42c5b7b7-59d1-3a83-9e76-51fad7201aaf.roa
File: 42c5b7b7-59d1-3a83-9e76-51fad7201aaf.roa (raw, json)
Hash identifier: Q9pR0daIaevlVZudSBPV317vVdP1+sgD4DXXwDb8pCE=
Subject key identifier: 42:CC:0C:D7:52:4D:2D:C3:C0:E3:9B:F2:12:B2:44:A5:D5:5C:3C:BA
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584838855D53B5EE72ECE4D5F080
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/42c5b7b7-59d1-3a83-9e76-51fad7201aaf.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 1225
IP address blocks: 204.2.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:5d:53:b5:ee:72:ec:e4:d5:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=7331fd3b-f50a-4287-84c9-a5be8ff315b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:67:cf:7c:0e:13:ff:32:aa:52:15:80:9d:
0a:00:5d:ea:ae:86:2b:81:6b:f7:59:19:d5:19:2a:
14:37:7b:b9:86:95:98:e1:66:25:ed:8a:66:5e:db:
66:f7:65:33:95:01:0c:00:37:9e:2a:19:e0:4c:1f:
7b:3b:00:72:4d:38:be:2d:98:52:01:4f:d3:27:5e:
77:3c:98:52:a4:c0:70:9e:68:55:a0:86:1a:d4:16:
f8:9e:15:27:d5:46:5a:0c:60:dd:6e:30:9d:0d:71:
92:98:24:a7:2f:17:c4:a9:1b:56:31:47:30:bc:e7:
a5:ca:36:07:a5:e5:5f:17:5e:d3:5d:8d:74:c6:54:
2b:83:cd:af:e5:70:db:8b:38:8e:9c:d6:57:4c:bd:
bf:90:99:eb:0d:f5:93:6d:28:9d:92:0b:ed:96:16:
61:5d:24:18:24:d3:65:0a:ba:2a:41:e8:60:22:14:
c4:f8:1b:92:69:dd:36:50:b7:cd:5c:e8:b2:d2:c0:
82:20:c7:25:0a:03:11:1f:57:16:77:43:ba:8c:7b:
d1:20:58:b1:19:4e:57:26:8c:be:28:53:5d:0b:c8:
80:a4:c0:e1:08:d0:4d:b2:9a:ea:b1:a0:6f:be:8f:
32:68:4b:43:d6:76:1c:48:18:c2:46:e2:5f:ce:d2:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CC:0C:D7:52:4D:2D:C3:C0:E3:9B:F2:12:B2:44:A5:D5:5C:3C:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/42c5b7b7-59d1-3a83-9e76-51fad7201aaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.2.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:97:1d:78:30:a5:c9:f6:67:b1:07:43:20:cd:d4:5c:ec:11:
6b:f7:17:b1:7c:65:02:46:55:bc:5f:37:8a:96:c0:d9:b1:bb:
70:94:ea:89:5c:13:32:ac:ea:fe:0c:9c:e0:01:92:e4:df:03:
00:3e:cc:90:b0:28:01:ec:04:6b:5d:04:22:96:82:66:12:87:
d4:df:b2:e6:00:ca:63:82:98:16:a7:ad:9b:ed:b7:5f:a3:98:
25:f4:bd:12:0b:d8:c1:cf:e6:92:b1:96:88:ef:61:fa:38:6e:
ff:15:99:ce:e1:af:0b:12:fe:29:0f:de:39:be:98:a6:4d:e7:
b5:cf:e4:11:7b:24:01:f2:a4:95:73:9e:22:7c:f7:df:3c:b6:
c2:93:01:7e:63:f7:c9:99:f1:2d:a5:cf:4b:3a:71:f6:a0:15:
49:0c:8b:ea:c1:d5:4f:81:98:ca:99:62:70:d3:5c:44:f2:77:
5c:4f:39:68:c3:6b:09:60:bb:2a:4e:45:c4:83:5d:5d:7f:26:
ed:14:f7:78:6b:31:be:7c:d4:67:9c:97:95:c4:29:25:30:4f:
c3:b3:6e:ef:cf:da:d9:34:11:0b:3b:44:ec:6b:72:24:76:57:
56:89:21:87:f1:a9:49:87:25:6e:70:e8:91:22:6c:cb:ca:7e:
78:11:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:45 2025 by rpki-client