Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa
File: bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa (raw, json)
Hash identifier: IsxDEGmhM36xco83OD0IxPY+wvETVZMc5Q3WIdUxw54=
Subject key identifier: 34:7E:76:94:11:F0:68:9D:B2:CC:F0:2E:40:E7:7F:C9:3A:58:B6:C8
Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial: 010D0C9F4328584843B0044E688D05F75AB65D80
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 23158
IP address blocks: 204.154.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:04:4e:68:8d:05:f7:5a:b6:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=5f824215-ff4b-4762-bb7b-bc4e2964f226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:1b:fd:03:35:a1:04:2b:26:f6:a7:19:31:
6e:9d:ec:23:cb:2e:79:06:da:d8:23:1a:83:3d:61:
82:72:67:08:c8:4b:6c:69:83:8e:bb:a4:89:02:4b:
0c:e5:07:ce:44:46:a8:fc:cb:fc:7c:6a:d1:23:df:
4b:21:7c:99:67:bb:14:30:ee:51:9e:09:33:fd:b0:
cb:b9:88:7a:6d:5b:15:c5:68:48:ac:71:2b:55:24:
54:8b:4e:05:79:09:32:76:8c:b7:6b:72:11:f0:9b:
3c:0b:e9:f3:1f:f5:a1:6d:59:82:1d:92:d7:d4:61:
16:14:04:ab:2f:cc:ac:c5:37:81:d0:84:89:4f:08:
8c:dc:de:a9:03:c9:9b:05:6c:af:2c:a9:2c:bb:db:
62:8b:e4:fc:4d:b1:e7:98:28:02:97:56:96:54:fd:
c3:1e:c2:f2:3a:eb:1c:15:d7:f3:6c:76:a0:ae:cf:
22:33:42:8d:0b:1a:11:c5:9a:e0:d6:15:a8:b4:87:
e1:52:0d:96:56:85:0d:06:27:ba:06:45:2a:ce:ec:
f1:a0:5a:c1:ad:2d:de:ef:04:ad:b7:14:3c:00:53:
57:1a:2d:c9:80:dc:56:bc:91:83:35:da:b9:cf:11:
23:3e:ab:41:8f:26:2f:4a:61:08:51:95:45:08:9b:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7E:76:94:11:F0:68:9D:B2:CC:F0:2E:40:E7:7F:C9:3A:58:B6:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
X509v3 Authority Key Identifier:
keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
sbgp-ipAddrBlock: critical
IPv4:
204.154.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:79:b0:b7:df:19:77:40:4f:65:ab:60:d4:ea:2e:e3:f4:30:
9b:66:d9:90:96:bd:cf:6f:dd:9a:3a:f3:0a:ac:a6:18:bf:30:
be:51:f4:fc:b3:77:ca:2e:91:06:e3:d8:0c:64:a7:84:66:58:
c4:98:1e:59:c5:76:18:38:af:27:80:28:23:0e:2e:dd:e7:2e:
2c:02:83:a0:8d:fa:40:43:0e:64:21:e7:38:83:0e:35:78:28:
74:30:26:68:3f:80:3a:23:e6:48:1a:f9:75:8b:73:d4:cf:a8:
f8:6f:34:f1:68:fc:64:ab:f5:8c:fb:44:90:cc:4c:62:2f:53:
55:e8:f5:6a:f9:12:b6:c7:70:2a:40:53:e4:5c:df:37:11:83:
58:3f:2a:e9:78:f6:3d:da:ff:04:f3:70:35:78:ad:c4:8e:f4:
88:1b:e2:c1:05:1e:f0:87:0e:e6:65:d1:01:88:22:29:7d:3d:
d2:f6:15:9d:ea:12:92:1a:94:73:09:0f:34:86:a2:36:86:6e:
d2:d4:c4:92:b1:70:16:a2:9e:05:39:54:e8:9a:87:ae:0f:3e:
0d:6b:84:57:17:e1:1f:eb:37:cf:60:6f:1b:3d:84:8d:69:dd:
83:e9:d4:7a:f3:c3:4f:cf:9d:9d:29:f1:f9:9d:b0:5a:13:49:
2d:c1:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:26:24 2025 by rpki-client