Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e3d95b3-9c92-30c1-a999-e8d5003d98d9.roa
File: 6e3d95b3-9c92-30c1-a999-e8d5003d98d9.roa (raw, json)
Hash identifier: 6ePFeF6bkwAiLT49Nu0ndHck6Wv/EWMwT9q/xdqsekw=
Subject key identifier: 3E:7C:6E:98:7C:D9:57:8F:18:D4:80:74:AF:84:76:8A:74:19:DA:5E
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858483E1ABB3936A62AF686568300
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e3d95b3-9c92-30c1-a999-e8d5003d98d9.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 40934
IP address blocks: 204.2.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:bb:39:36:a6:2a:f6:86:56:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=c68e2eac-88b5-4de0-8887-60caf7178201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:85:03:b7:8b:f0:3f:b9:e0:af:a9:f8:a1:
0b:dc:af:d9:1e:c4:eb:6e:aa:e8:32:0e:28:c8:62:
19:99:53:65:44:fb:82:31:1b:7b:29:d7:e5:d3:3a:
d0:7f:46:bc:6e:a6:58:02:31:80:7c:ee:06:f7:d7:
d8:94:c0:62:f2:60:e5:a9:ac:0d:f8:66:73:1f:d4:
ba:c5:82:ce:01:f7:5b:62:3e:4a:ed:59:ef:32:b5:
b7:90:cd:8a:80:ff:f6:f6:eb:c3:05:be:e1:76:69:
a1:c2:4e:22:55:e4:80:7d:b5:62:22:a4:98:c9:78:
9a:5d:c1:5e:35:11:e2:91:e7:ef:ca:b7:89:d6:ad:
7d:91:f6:d2:05:38:e5:c6:33:cd:6d:28:a4:3b:91:
06:c4:13:0c:95:9e:65:5f:1a:b0:98:c6:ba:1b:f8:
a3:b8:83:8c:d1:f5:fd:6b:d7:fc:06:6a:74:3e:3f:
17:2d:17:5b:12:25:be:67:c0:45:20:0b:65:a9:9a:
33:41:5f:15:e6:1f:1f:26:38:f5:b0:af:65:76:a0:
37:03:3d:45:50:39:48:32:b2:44:9c:14:17:fb:1f:
1a:1f:6b:11:85:ca:0a:77:1a:63:a8:91:ea:eb:29:
d9:ae:91:93:8c:48:ba:61:43:97:a9:34:c6:38:15:
b0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7C:6E:98:7C:D9:57:8F:18:D4:80:74:AF:84:76:8A:74:19:DA:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e3d95b3-9c92-30c1-a999-e8d5003d98d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.2.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:0e:b4:fd:e5:47:20:99:e5:e9:c0:cd:a0:5b:0a:0c:1e:ed:
ff:bf:63:fe:45:c8:c4:84:ad:3c:90:2b:c3:db:9a:8d:ca:a0:
29:37:41:6d:89:31:a0:ea:2a:ac:1b:69:71:a5:f7:b9:c2:8f:
b2:b6:6a:57:05:c5:de:5b:91:52:b9:28:7f:46:ad:44:b6:ee:
31:ac:1f:39:1f:bf:d7:24:72:b6:99:d5:93:80:07:6f:df:4b:
ce:26:ce:b8:0f:f2:3d:55:17:19:43:f1:02:8a:6d:76:0f:47:
8c:a1:4c:2b:73:19:1a:93:c4:d8:a2:48:64:0b:10:14:c0:46:
68:e2:f4:5a:13:c7:ad:05:65:0a:9d:19:73:c4:70:c8:37:94:
c9:5b:00:c6:1f:7d:91:92:a1:a2:1f:13:f1:d2:fb:7c:96:14:
c3:cf:52:25:77:1f:40:da:5e:ee:ef:47:cb:2e:46:2a:18:73:
1e:45:a7:22:92:9c:e1:30:1f:c7:73:5c:bf:17:a4:f6:d3:9a:
ee:ef:ac:fd:80:17:59:53:9d:53:bb:8c:45:f8:56:d9:53:62:
92:e7:0c:5b:38:53:30:0a:5e:84:1b:89:20:60:07:27:37:67:
4e:0f:05:92:71:41:0f:8a:ba:b2:07:31:f8:1b:0b:0c:58:ec:
d8:c3:66:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:17 2025 by rpki-client