Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa
File: fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa (raw, json)
Hash identifier: PI7hjCQI67V90FvMf+hlNmN/zIoUCGVmQujwikSH/D0=
Subject key identifier: 76:93:2D:B4:F2:A4:53:2C:F8:DD:EA:7D:92:82:94:5E:39:4D:FE:70
Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Certificate serial: 010D0C9F432858488280820C653C073301A4D080
Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 398573
IP address blocks: 204.108.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:82:0c:65:3c:07:33:01:a4:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=a1e8202d-6826-48ad-956b-bf874f29b042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:bf:a1:b8:ff:94:2b:a5:55:59:19:dd:b6:
6c:fe:05:57:47:5a:69:0d:53:d2:4b:d2:ad:15:2b:
1d:3a:69:bf:69:aa:6b:11:33:4d:f3:9d:1e:a1:30:
94:d1:d3:76:da:d7:e2:6c:00:7d:ff:fa:f6:c9:9f:
cb:00:a4:5f:74:75:a3:35:6a:5e:47:a1:40:fc:c2:
e8:d5:dc:03:39:39:d3:0b:ed:2d:c5:4c:5b:59:85:
56:80:cd:fd:44:5f:94:8b:13:ea:03:c6:c3:38:e8:
61:2d:88:01:b9:8e:77:f9:06:6b:50:e2:f8:1b:01:
ec:4b:9e:57:de:f3:60:4e:da:9b:3c:42:e8:03:28:
4b:b5:b7:b6:85:26:d8:b8:93:5e:d5:33:e6:22:bf:
04:54:d6:81:a6:38:e6:43:37:cf:0d:74:82:24:a9:
90:ef:1e:09:75:b5:98:66:c6:aa:28:3e:a6:a5:fa:
f2:aa:d9:9e:ec:47:e8:cc:fc:61:f5:bf:48:31:f4:
29:33:86:f3:5e:14:6f:41:59:43:23:b5:05:d8:79:
04:85:dd:9f:8c:be:9f:4d:83:de:bd:e3:39:a6:9f:
49:d6:7f:c8:3e:ca:68:10:24:ce:58:a2:78:51:56:
82:2d:96:a4:fa:29:c1:df:bd:6b:0c:10:f1:7d:f8:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:93:2D:B4:F2:A4:53:2C:F8:DD:EA:7D:92:82:94:5E:39:4D:FE:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl
X509v3 Authority Key Identifier:
keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.108.184.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:04:63:be:d1:ac:a8:d4:59:b2:3d:89:b6:3a:f7:f8:b2:7c:
8e:b2:1b:6e:3a:00:73:d0:41:a1:04:97:f5:01:fb:28:ed:a6:
db:ca:27:48:b9:e3:a2:7b:db:e6:af:80:25:9c:b6:6f:19:85:
ef:9e:b5:03:6a:48:b9:ae:e6:29:dc:1e:a7:b1:cc:98:18:11:
b2:36:3d:74:a0:ff:20:00:3b:57:2e:a1:5d:67:07:0e:7f:ec:
e3:a5:1f:d8:9b:36:8c:d7:26:e6:e3:8d:d9:1b:64:77:e9:6e:
4d:d6:17:f9:52:25:10:7a:c8:74:bd:16:e4:b3:ba:df:64:8d:
39:62:e1:df:9b:de:ef:07:3d:f3:23:99:a7:d1:40:3c:1e:e4:
43:8e:fc:13:26:b2:46:62:7d:97:d3:6f:7d:c1:f8:85:08:a8:
09:d6:a5:ca:0c:ca:07:c5:f9:37:58:d2:30:0e:f1:48:bb:e4:
70:0f:08:0f:a1:31:df:16:02:93:7c:4d:18:ff:97:84:af:79:
1e:77:11:26:2f:64:50:0d:9b:d7:b5:7d:32:70:0c:72:d1:3d:
ca:cf:81:b8:37:56:9e:27:97:31:37:71:3e:e3:76:44:a3:39:
ae:65:79:49:39:2e:8d:bf:b9:bf:e7:f4:d9:f2:fc:cd:60:8a:
87:9c:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:03 2025 by rpki-client