Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/15073b81-c08c-3791-939b-cb3a8d58fcb3.roa
File: 15073b81-c08c-3791-939b-cb3a8d58fcb3.roa (raw, json)
Hash identifier: GpfXdrMNcMsnKflonnvzomhDxQp/kjgZ/feFo1iIuxE=
Subject key identifier: 29:27:CA:43:BE:41:0D:D8:B0:CE:C1:0E:50:CD:D0:44:5F:51:D8:09
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3C83483374EA71CADC00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/15073b81-c08c-3791-939b-cb3a8d58fcb3.roa
Signing time: Mon 30 Dec 2024 18:10:37 +0000
ROA not before: Mon 30 Dec 2024 18:10:37 +0000
ROA not after: Sun 30 Mar 2025 17:10:37 +0000
asID: 6559
IP address blocks: 204.84.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3c:83:48:33:74:ea:71:ca:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:37 2024 GMT
Not After : Mar 30 17:10:37 2025 GMT
Subject: CN=189aa385-779b-4074-aace-4bbc4c6bfd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:15:68:44:07:7f:3b:56:a1:50:5c:83:f1:
0d:4d:47:80:e9:65:8c:93:a2:72:2a:f8:0d:0e:04:
0c:5d:37:a4:49:b0:7f:cf:1f:7b:36:59:74:d8:f3:
39:d7:1a:a6:f5:66:fe:66:72:c4:b7:db:37:b4:e4:
d7:65:aa:39:c7:ee:c0:dd:21:68:27:89:b0:16:10:
fb:14:a8:1a:02:6b:20:56:e6:37:0d:0a:e5:57:7b:
52:04:ae:97:09:10:bf:e5:16:68:ed:58:29:5d:22:
0f:13:cc:ed:e2:6b:5f:23:35:f0:c8:ec:ec:3a:27:
53:58:45:3b:80:92:f9:5c:6d:df:57:75:9c:bb:94:
08:f9:a7:37:6d:1a:d7:83:23:44:1c:8f:d3:a6:a5:
ce:e7:06:5b:e9:18:4d:a4:c6:bb:83:29:9e:8f:e6:
b7:57:66:f6:80:c1:ae:27:43:59:5a:c1:57:30:6f:
72:a1:36:f1:17:a3:ff:54:a5:c7:09:fa:5d:ac:70:
f5:00:d7:0b:d0:64:8e:22:2f:c8:e6:83:6e:49:1d:
41:e5:db:ce:25:2c:06:35:84:2b:b4:e5:85:c9:3e:
7f:ff:1d:f2:3f:4d:a0:46:2d:ca:1e:22:9f:a3:a3:
1b:24:c8:0a:ca:67:f8:13:3f:97:9d:58:91:e7:3e:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:27:CA:43:BE:41:0D:D8:B0:CE:C1:0E:50:CD:D0:44:5F:51:D8:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/15073b81-c08c-3791-939b-cb3a8d58fcb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:d8:4b:0e:90:60:38:9f:62:c6:3e:d4:a2:db:fb:10:f3:f2:
c1:f1:d2:9f:6d:2d:fa:bb:85:ab:41:ce:1d:66:4c:90:ea:3a:
44:36:0c:d8:70:48:4e:33:2f:72:f3:ac:3e:c4:48:9d:a5:ed:
db:b8:2d:92:51:c9:f5:0e:bf:95:8a:74:32:c1:41:ba:a8:a3:
6e:51:d5:31:32:5e:af:6c:54:0a:53:4e:d8:e4:a0:b2:ca:2a:
1f:ed:5f:5f:33:f3:e2:96:3b:59:77:2f:88:3b:82:5e:e4:57:
83:bb:19:d2:c4:23:c8:ce:4b:e7:22:ea:34:9c:b3:ff:b0:46:
e8:e4:03:04:df:35:f1:9b:a3:cc:3f:4c:01:16:69:ca:41:77:
9f:83:9a:3e:2e:2f:94:8e:b0:82:4a:fb:69:e8:9c:d4:b3:4a:
3e:a3:7d:7a:5b:c9:09:30:e1:14:be:78:f0:4c:3a:24:59:21:
fc:8f:03:b7:f9:b8:4a:02:44:8c:66:bf:16:d3:81:3b:ab:23:
0c:04:5c:a0:94:81:b8:0d:71:42:32:09:89:c6:f0:57:76:8a:
9c:22:17:8c:9e:04:e9:03:c6:46:72:6a:8a:54:05:ab:bb:ee:
40:6f:f5:e7:87:b0:1f:2e:ee:79:13:b4:3b:ed:d5:68:62:fe:
46:b1:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:06:10 2025 by rpki-client