Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa
File: cec05261-0f78-3265-830a-98a87b1c4a62.roa (raw, json)
Hash identifier: e1V5d9TKCyooT5KTxHZHWvXrzhwoOzANUMhHCmfUgbU=
Subject key identifier: 8A:79:D7:82:37:E9:20:D5:07:D9:C0:C6:FA:85:4C:5C:39:40:14:A9
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F432858488DAB4C4806FC695084CDC800
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 27602
IP address blocks: 204.48.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4c:48:06:fc:69:50:84:cd:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=02d32f14-e8e7-485d-8c4f-498ac3d59bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:47:1d:ca:55:2c:79:24:bf:be:7d:06:a5:92:
5f:c2:a7:55:d7:04:8b:a9:e0:ec:61:9d:e4:76:29:
0a:78:27:a0:0b:f6:8f:11:eb:41:d6:50:f3:df:9e:
af:7a:60:55:36:2d:32:38:e1:82:17:15:bf:eb:1b:
b4:3e:b8:92:0d:f6:15:92:b4:a0:a5:21:18:e8:ba:
92:f9:26:70:8f:33:5e:f0:cc:95:c5:9c:39:7e:31:
ad:dd:ea:c5:fe:78:92:9e:5d:9d:62:a3:8d:bd:29:
ce:01:4f:2e:94:7e:ea:ac:87:8b:0f:50:32:01:b7:
39:38:6e:49:66:7a:7a:b6:8c:f9:7f:a8:2d:c4:e9:
34:c8:db:b6:cf:0f:7f:f1:df:e2:ca:47:13:71:e2:
61:2f:a5:70:60:c3:4d:af:31:7f:b6:83:eb:ab:e3:
4c:fe:6c:c0:cc:ca:dd:2f:13:2a:20:1c:dc:33:27:
2e:76:fe:a0:e3:d8:61:5c:d3:27:12:bd:8a:e7:ae:
ab:60:e5:b7:0a:31:4a:0a:0a:5d:33:01:40:db:36:
c5:db:97:20:13:46:20:d4:b9:2d:f6:11:c6:1a:4e:
51:68:36:19:00:f6:b7:3b:2c:b8:a5:9b:a3:04:e0:
80:c7:84:a5:64:de:90:ad:24:af:cd:eb:3e:a3:81:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:79:D7:82:37:E9:20:D5:07:D9:C0:C6:FA:85:4C:5C:39:40:14:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.48.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:49:84:e8:ec:a2:55:aa:e4:bd:7e:0f:c2:81:da:e3:1b:cb:
22:15:4f:8b:86:9d:e4:fa:85:3e:38:6b:bb:e1:b6:13:44:7a:
10:c8:ab:85:af:e0:48:0f:7a:03:fd:bd:8e:ba:be:94:10:de:
d7:0a:91:bf:1c:87:4c:21:b4:ff:9b:6f:18:2e:3a:c8:e8:2e:
20:8c:c6:0e:95:03:d1:ab:79:15:22:a9:dd:06:1a:e3:bf:b4:
6c:30:e1:da:34:27:17:46:23:a1:cb:e5:c5:db:5e:ce:98:a0:
a3:f8:84:c1:e4:8d:86:85:52:89:d7:d7:43:48:e4:0e:ca:ec:
d4:ed:fd:a2:23:35:4d:3a:cf:42:b5:d3:c4:10:87:ea:10:9c:
37:40:0e:b9:95:3f:06:f8:6b:a8:a7:3b:5a:ff:52:04:3e:fd:
9a:fe:ee:67:d7:4d:00:01:06:b1:f0:83:31:1e:fc:73:d8:c3:
88:ef:74:85:5f:60:5a:17:d0:3a:ee:5f:73:09:51:a3:82:57:
7f:71:0f:56:0f:52:e7:03:83:fd:71:d4:3e:0c:09:1a:d4:8f:
a2:d4:af:03:96:8c:10:5c:3c:e5:8f:67:b9:c0:3b:ec:46:87:
85:45:ae:25:7a:54:90:5f:e2:8f:a1:2d:e0:aa:7c:57:d2:9d:
30:68:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:41 2025 by rpki-client