Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76dc5892-9d3c-3e8f-ba1d-86b12f7b359f.roa
File: 76dc5892-9d3c-3e8f-ba1d-86b12f7b359f.roa (raw, json)
Hash identifier: w86lx0YiJV9dhy6TlbugqClrYUnkfpIiOL4BxtNREKY=
Subject key identifier: D2:1B:2C:91:41:AF:83:E9:EB:C5:72:54:11:9C:2D:73:71:7E:39:E7
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858483E1AB9740307763AA1F9A040
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76dc5892-9d3c-3e8f-ba1d-86b12f7b359f.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 204.2.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b9:74:03:07:76:3a:a1:f9:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=f90930fe-a5d4-4966-8bb4-cc0b9dae3d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:67:06:f9:c1:f1:f6:f8:a8:8a:d8:f2:47:
c0:f4:38:18:f0:91:d9:f4:cc:fa:78:c1:3d:43:5e:
03:12:de:3d:6a:34:87:a9:09:3b:f6:83:e8:22:bc:
6f:e8:0e:56:49:b2:fb:ad:6c:56:cc:e5:b0:35:c4:
f3:30:66:b2:dc:95:02:10:26:17:96:b1:4e:f4:c6:
0a:e1:4f:2c:63:b5:a5:0f:52:96:e2:47:1b:fd:ab:
f7:4d:a7:14:a2:be:13:7f:77:f5:66:57:96:23:12:
e6:fc:b4:df:f2:08:07:1c:84:fa:38:5d:1e:3a:74:
64:c3:16:cc:1c:cb:3e:cc:f9:6b:f2:99:0b:40:a0:
7b:5b:75:5b:04:8d:8b:c8:cf:3f:dc:f1:bc:80:87:
38:f9:bc:66:7d:8e:77:ce:a7:97:39:38:fc:04:7b:
77:a6:80:12:2d:ca:94:8c:80:57:ee:c8:0d:4c:8e:
fb:6b:84:c9:96:66:ee:6e:0d:ac:95:2c:13:16:f2:
77:37:54:37:bb:5c:d9:7f:b6:eb:35:2e:1d:b2:f9:
ff:47:31:58:43:22:31:76:3a:06:3c:98:e1:2c:67:
58:d0:13:4c:db:7f:ec:21:6b:e5:6c:b8:88:e6:9e:
6e:7c:a5:b3:e6:48:44:90:5f:27:39:03:50:63:14:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1B:2C:91:41:AF:83:E9:EB:C5:72:54:11:9C:2D:73:71:7E:39:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76dc5892-9d3c-3e8f-ba1d-86b12f7b359f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.2.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:03:19:cb:c1:d6:f1:f5:92:6d:8e:7f:f1:70:d3:cd:bd:9a:
a3:05:2b:84:7d:18:c1:7b:ed:f5:40:ae:f6:0a:99:fb:e0:51:
66:0b:d1:aa:be:77:71:19:30:ce:cb:2b:fc:10:87:83:95:5f:
fc:87:07:3d:2f:57:b2:6a:6d:b6:76:64:e4:c4:58:1a:c5:c2:
69:b4:b1:3f:c3:16:f3:0e:11:81:99:ff:eb:76:3f:94:fe:1e:
50:70:98:37:9f:15:4b:12:1e:06:22:1f:9a:a3:ce:3b:17:1f:
45:63:21:bd:8e:78:b1:3e:17:9e:f4:fa:1e:e0:18:29:3b:26:
f4:7a:a0:1f:db:4f:f6:b7:25:d6:19:c6:b8:28:49:52:ac:df:
f3:93:43:73:37:ea:d5:36:40:0d:ee:e4:c5:31:45:d7:0a:b0:
87:c1:79:d8:1e:52:74:b5:75:de:33:0c:c8:49:b7:5d:7b:b0:
82:35:e4:52:ec:01:db:75:be:85:91:70:b2:ea:ad:6a:7c:17:
1b:fc:30:8d:fd:20:59:87:69:3f:21:60:8f:97:93:7d:7e:ef:
6f:97:66:24:05:9c:5c:9e:d5:6c:24:bb:56:d3:61:f7:58:5f:
3d:da:cc:2a:84:ec:96:23:6c:c6:93:8e:df:0a:86:96:d6:d9:
d6:27:69:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:08 2025 by rpki-client