Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a2e7b5e2-d6c1-37e9-9f06-26c28e296110.roa
File: a2e7b5e2-d6c1-37e9-9f06-26c28e296110.roa (raw, json)
Hash identifier: YtxLvTkPh2iAVS4mc6IME/EfdjneXcwT4i0uSJNiTwc=
Subject key identifier: 5F:8F:FA:0D:A7:35:43:4A:8B:31:B7:B9:38:6C:47:A9:25:5F:C5:5A
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858483E1ABAD7A15F39B1365BBA80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a2e7b5e2-d6c1-37e9-9f06-26c28e296110.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 204.2.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:ba:d7:a1:5f:39:b1:36:5b:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=a2509a73-6903-4e1f-a77f-12916dbe1d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:05:5b:71:11:6e:0e:e3:d5:51:7b:26:04:
c5:16:eb:c2:91:19:0d:5d:5d:42:96:68:e1:80:07:
0a:e2:b2:04:ab:64:e8:7b:d7:d0:84:8d:78:12:7c:
cc:9d:f1:bf:a2:c0:b5:96:3b:0e:f8:db:61:47:b0:
f3:bb:4a:d6:60:50:ef:9d:5e:44:f6:ed:32:d3:6a:
b1:29:22:5a:47:05:ba:34:f6:2f:73:99:78:8e:c8:
8e:1c:64:8e:e2:68:5b:84:5d:66:a7:64:8d:72:f7:
b9:ce:a6:3c:5c:28:47:e7:ce:f3:1f:8b:38:89:25:
95:5f:61:1e:1c:99:55:78:db:cc:66:a9:26:e9:2a:
2c:60:9f:dd:84:d3:c1:dc:65:c0:e5:d7:db:76:fb:
8c:a9:d2:84:e6:dc:2f:d1:4a:06:cf:09:67:c3:a3:
03:ed:3b:4a:92:d7:bb:83:ea:07:bd:14:54:02:28:
db:2b:36:59:49:5d:77:ac:17:cf:bf:c1:10:e6:d8:
cb:38:a3:ad:61:88:16:86:af:66:32:1b:41:63:78:
f3:5a:aa:aa:0a:3c:7a:6f:50:5c:f0:cb:8b:43:ae:
80:43:48:a4:3f:6e:d0:03:ec:f0:88:b7:a6:86:3d:
6b:d1:ed:f1:c7:bd:35:e7:be:0b:cc:95:0d:f2:91:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8F:FA:0D:A7:35:43:4A:8B:31:B7:B9:38:6C:47:A9:25:5F:C5:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a2e7b5e2-d6c1-37e9-9f06-26c28e296110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.2.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:cc:33:4c:f4:57:82:f7:3c:b1:f5:8c:d6:4c:fc:1d:02:28:
4a:90:9a:10:d0:10:99:1f:42:a9:c4:49:54:00:4c:cc:6b:d1:
52:c2:a1:c1:c5:99:f2:14:99:d9:9e:73:57:09:ff:e3:3b:fd:
46:61:09:ad:75:c5:4b:4d:83:22:96:d0:8a:93:02:da:cd:e7:
fb:88:e5:05:5f:af:5e:26:a1:46:cb:db:73:7e:bb:e0:8e:dc:
fc:53:87:74:b8:27:c3:86:f6:8c:54:11:63:2c:da:6c:4b:63:
53:91:98:ac:57:b7:95:ae:8d:dd:1b:16:82:e0:80:51:b7:b9:
d5:eb:87:24:d6:29:73:60:e5:49:fd:c9:86:4c:19:db:fa:4c:
c1:60:49:48:c7:6d:5c:46:d5:db:83:2d:89:b3:db:de:49:69:
16:22:94:56:e0:5d:88:15:e7:ce:a5:b2:a8:2d:0c:91:fc:00:
e5:4d:90:0b:bf:58:14:e3:f2:68:1a:e3:92:00:3d:e0:cd:20:
6d:97:2b:6a:9c:fa:ac:9c:8c:76:16:84:91:ae:61:d6:76:83:
f9:4e:7a:06:ea:2b:08:c2:34:4e:a2:5b:ba:52:d7:6a:0d:12:
2e:16:2b:2f:08:1c:d6:ec:6f:e4:3f:1a:e4:bd:eb:53:d9:d1:
48:d8:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:54:46 2025 by rpki-client