Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa
File: a8644137-6b60-3be7-b264-80e3e2c1a315.roa (raw, json)
Hash identifier: tXUc+wY1ONjKq1mwSCtCxU85cXXaoIl4Wt4zaJQGD14=
Subject key identifier: D6:7F:97:1D:AB:49:2C:2A:2B:79:27:F5:54:63:B1:2E:F3:7E:A3:2E
Certificate issuer: /CN=17c62883-899d-4b86-8800-e9715d10a482
Certificate serial: 010D0C9F432858482EC004385479B8DEE332EF90
Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 30305
IP address blocks: 74.113.192.0/21 maxlen: 24
204.86.64.0/19 maxlen: 24
206.201.64.0/20 maxlen: 24
208.93.241.0/24 maxlen: 24
208.93.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:04:38:54:79:b8:de:e3:32:ef:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=fc1af448-b9ed-43f6-9d0a-615a70fd23b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:45:31:49:5a:6e:bd:a4:53:11:40:d4:0d:
d1:5f:1c:71:30:37:b6:2b:3c:94:54:e3:01:48:6a:
c4:e0:25:a1:50:96:7c:a3:ee:b9:ca:57:07:69:dd:
14:a5:c4:0c:97:45:cf:06:97:95:bb:d7:64:3b:76:
ec:aa:73:fa:fc:ac:55:80:7f:22:ac:ea:d5:33:83:
1a:1a:ed:3c:4d:bf:0a:e1:4f:e1:34:0d:5a:7c:91:
9e:b6:b6:34:bd:8f:3a:a4:1e:44:cd:3a:68:8d:29:
84:17:59:52:03:a4:c6:40:20:ad:41:c9:78:0b:72:
0e:ee:4c:80:0c:63:a1:66:4f:85:f7:29:9f:6d:6c:
ae:58:51:e4:1e:29:cc:4c:a0:ed:9d:5b:60:0d:bf:
5a:7f:1d:b3:33:e8:5f:60:ae:db:0a:2b:53:38:a1:
a1:9a:86:25:32:cf:8e:f9:ab:46:75:ed:56:76:42:
aa:b4:a7:18:dd:2b:4b:95:8f:a9:ba:6b:af:72:8a:
4d:4b:93:ea:7d:8d:77:fe:9b:62:4a:d3:e2:25:bd:
ee:5a:89:5f:b4:33:af:b7:23:91:07:23:c8:7d:ca:
f7:5e:72:e4:3d:4e:2b:e4:2f:9a:bb:49:90:29:fc:
a2:0e:25:23:27:82:e4:cc:5c:5c:57:ef:c1:eb:e5:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7F:97:1D:AB:49:2C:2A:2B:79:27:F5:54:63:B1:2E:F3:7E:A3:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl
X509v3 Authority Key Identifier:
keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
sbgp-ipAddrBlock: critical
IPv4:
74.113.192.0/21
204.86.64.0/19
206.201.64.0/20
208.93.241.0-208.93.243.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:14:6f:ea:39:d3:e7:06:cc:51:f4:1a:6c:ae:b2:31:54:8e:
14:f6:d5:c9:8e:76:d2:ef:ec:6f:13:77:4d:67:c8:0c:ca:45:
b0:9d:e3:1a:91:40:45:14:11:04:93:1e:e9:61:41:d8:9c:ac:
2d:f8:f1:67:6b:63:f5:7d:29:5d:b4:fc:a2:10:47:74:62:27:
13:51:10:86:82:7b:3d:22:e5:04:4a:40:2c:6a:3f:96:ff:d3:
27:92:12:bb:0d:ac:30:0f:9d:4b:49:ce:24:43:d7:46:80:fd:
0e:16:45:e4:cd:fc:19:42:87:3d:20:ec:ca:d1:5d:de:43:bb:
b1:6c:6c:98:db:2e:d1:18:27:a8:4c:90:ea:22:ae:4f:03:28:
1e:3e:70:6f:2d:c0:4f:76:5c:24:01:68:e1:21:01:3c:7e:2f:
7c:46:f9:c4:f9:6f:c0:60:c2:31:21:7a:66:42:d1:bc:66:9b:
47:8c:e9:cb:8b:dc:dd:90:48:39:4c:ab:87:c5:48:df:03:dc:
af:7c:08:7f:70:f3:d9:26:25:60:35:8a:d3:5b:d7:67:c0:95:
04:cf:d6:06:70:8e:ea:d7:fd:6b:1b:83:f0:73:92:77:18:42:
e1:18:74:a3:b0:bb:f7:46:f1:6f:a0:25:79:86:9a:7f:ea:05:
c4:7b:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:27 2025 by rpki-client