Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/2982a1ea-4e16-34ae-8afc-1c1b857ab301.roa
File: 2982a1ea-4e16-34ae-8afc-1c1b857ab301.roa (raw, json)
Hash identifier: 37QcV50Iv1dE6LfCyBu8txMy0IJUUgwyp8ertQ82YiE=
Subject key identifier: 20:8F:E3:A9:3F:D7:39:6C:C9:1E:58:FD:22:EE:42:25:73:DB:66:86
Certificate issuer: /CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55
Certificate serial: 010D0C9F4328584839EABFA478EBC8CF47CC10DA
Authority key identifier: 3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/2982a1ea-4e16-34ae-8afc-1c1b857ab301.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 14618
IP address blocks: 204.17.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:bf:a4:78:eb:c8:cf:47:cc:10:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=009605a3-0139-4398-8251-15e24f7705de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:c1:5b:17:bb:b2:a9:3f:3a:d7:51:eb:48:
87:c0:21:6e:70:6a:e0:d3:b2:d1:bb:61:da:b1:5f:
02:b0:00:20:94:0a:ef:a3:4d:10:4f:8c:ab:1e:4e:
77:d9:3d:09:5d:ca:36:25:eb:61:51:ab:34:b7:11:
fe:59:95:96:bf:11:9b:49:b8:a2:2f:fe:e3:91:7b:
f9:79:6a:2b:fe:ff:c0:6c:39:ce:61:64:b9:fd:a0:
7a:e4:53:07:08:74:11:c1:82:7b:cc:98:fe:55:43:
75:b4:be:44:6d:33:a0:88:a6:a9:4c:7f:89:73:f3:
a9:99:8d:c8:10:25:7f:a0:33:78:f8:1f:ac:31:17:
4c:a8:bc:f8:f8:04:0a:db:73:2c:f9:70:29:2e:7b:
1a:2d:43:69:47:04:f7:22:91:91:52:e1:97:32:9c:
34:5b:a3:db:fb:1f:3d:e9:89:75:7b:3f:f4:f3:5c:
2b:16:29:b8:47:22:6d:fc:6c:b3:da:df:33:10:6d:
73:4d:49:95:11:cf:bf:aa:5e:71:4e:58:11:9b:4a:
95:ca:4a:f9:cc:26:1f:c8:94:d2:bd:2b:e1:02:b2:
77:e4:76:7d:b6:e4:24:ce:93:69:c8:a5:f9:b0:a9:
f3:9e:23:82:08:0b:ee:4f:bf:91:e4:d1:a7:b4:44:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8F:E3:A9:3F:D7:39:6C:C9:1E:58:FD:22:EE:42:25:73:DB:66:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/2982a1ea-4e16-34ae-8afc-1c1b857ab301.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.crl
X509v3 Authority Key Identifier:
keyid:3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer
sbgp-ipAddrBlock: critical
IPv4:
204.17.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:96:4b:cb:e3:1b:6f:96:8f:f4:7b:6f:46:7b:f3:60:46:21:
b9:f6:3b:37:cd:a1:e6:7b:c7:f7:f5:d0:6b:30:83:f7:66:94:
71:fd:a9:e8:c9:51:9e:ff:36:c8:32:a2:5f:80:92:43:a6:34:
68:60:47:05:e7:7a:0f:ce:c1:a6:bd:14:f3:ac:68:c8:d8:ee:
5a:57:13:95:f9:d2:fe:d3:56:b8:a9:93:c6:15:cf:2f:01:03:
b9:18:90:13:a4:fd:65:d4:57:3a:92:62:55:a9:21:e5:11:b4:
28:ba:aa:50:1d:8c:e8:35:35:65:01:1d:3e:6a:e3:73:ca:a3:
5b:2d:d0:3a:98:df:c5:84:24:f8:08:c3:5e:c9:68:8e:53:ea:
3a:13:74:5d:34:7f:cf:06:2a:5a:b4:af:42:b7:d9:06:c6:b2:
a1:1a:84:79:ab:86:f4:92:ac:9b:77:37:dd:8e:58:4d:56:0e:
4e:de:e9:5e:ea:60:9c:33:8d:ce:01:94:26:d7:ba:32:ed:75:
b7:8f:8e:da:45:fc:36:bb:45:1e:13:41:a9:eb:64:0f:88:0b:
88:1d:b0:fc:6c:1c:ae:ea:5c:1a:b9:77:af:99:56:22:ad:d6:
49:8a:3c:c7:6f:c5:66:1c:c4:e2:f2:77:50:ea:75:b5:86:60:
a0:cc:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:16 2025 by rpki-client