Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4425cac0-b7ba-3614-94ff-0550d677ccfe.roa
File: 4425cac0-b7ba-3614-94ff-0550d677ccfe.roa (raw, json)
Hash identifier: 0UzNgeQF7N7iqPrnnwTDUudOzgheuqnR3iiXk5GqGJ8=
Subject key identifier: F0:75:2C:0A:0B:43:2A:F0:DD:7A:9C:43:65:97:89:20:E5:BD:8A:D4
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3CAEA16342C1DCB737B0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4425cac0-b7ba-3614-94ff-0550d677ccfe.roa
Signing time: Mon 30 Dec 2024 18:10:37 +0000
ROA not before: Mon 30 Dec 2024 18:10:37 +0000
ROA not after: Sun 30 Mar 2025 17:10:37 +0000
asID: 6559
IP address blocks: 204.84.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3c:ae:a1:63:42:c1:dc:b7:37:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:37 2024 GMT
Not After : Mar 30 17:10:37 2025 GMT
Subject: CN=0890f2ee-6f09-4212-8cd5-176bb76da418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:7a:9f:bd:23:5c:32:3a:84:a7:1e:67:f0:
49:93:25:88:a7:f5:ea:e8:e1:ee:6e:af:cf:81:48:
8c:64:5e:de:d4:6f:a6:af:6c:e5:7b:37:88:a7:f9:
1c:3c:0c:c6:8d:57:47:dd:8a:04:b8:9a:4e:d5:95:
9d:d0:33:dd:57:42:b9:36:bc:ac:b7:8d:86:5a:a9:
26:e5:6e:84:e2:d7:70:85:ac:f4:78:dc:6f:9c:73:
3b:2f:87:c3:c6:eb:b0:6c:b3:5f:a2:1b:57:e2:cf:
7f:d3:50:fd:a4:f1:c3:e8:8f:cd:7f:c9:cf:e2:38:
9b:90:23:70:a3:d2:64:c5:96:d9:b6:da:7b:ef:ce:
1a:9f:af:10:7a:15:8d:8c:37:68:a1:45:f0:b3:b2:
ee:03:68:5e:59:ae:a6:d8:65:fa:4d:7a:e5:f9:28:
01:90:3d:4f:80:96:ec:8a:2b:32:a9:2b:d9:5b:e6:
4a:83:0c:b1:24:e3:91:b0:b3:a3:02:c9:04:f4:dc:
52:f9:f9:31:38:3a:ed:86:44:da:f1:5e:11:1a:c5:
f1:0a:09:ab:76:e7:f3:14:c2:82:19:d5:7a:38:4b:
78:dc:87:55:86:b0:4a:b9:f2:c5:cb:a5:77:b9:e5:
09:0d:93:b5:28:3e:d6:bf:96:32:fa:19:18:13:40:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:75:2C:0A:0B:43:2A:F0:DD:7A:9C:43:65:97:89:20:E5:BD:8A:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4425cac0-b7ba-3614-94ff-0550d677ccfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:b5:88:df:87:62:bc:9a:ba:a9:74:57:c7:dd:bf:ec:5a:a7:
67:b1:f9:27:d6:58:c6:90:b8:6d:d8:ab:59:89:06:fd:c3:b4:
16:a9:77:99:d5:cb:bb:69:5b:5a:ca:75:70:99:0a:13:24:ec:
62:87:84:45:ce:02:41:6b:b2:79:aa:48:dc:e0:ce:7d:e9:b5:
36:0a:a7:9c:bb:cd:d6:94:d2:64:96:44:40:19:c2:9b:c6:9c:
fc:6f:dd:94:09:d7:a6:82:71:bb:59:f8:17:9d:d7:e5:a1:c0:
29:7f:81:7e:80:98:35:c0:9e:30:79:a7:88:a4:e7:1d:dc:83:
f1:94:d7:6e:54:80:70:4b:4a:d1:18:80:6d:de:70:12:97:d0:
84:e6:2c:f1:66:ba:68:eb:70:33:dc:e7:fb:2b:ae:bd:f2:2d:
4e:ec:af:e3:ca:31:70:cf:14:1c:bb:08:dd:86:aa:39:87:07:
5b:80:e9:80:2d:8f:43:a7:c9:b1:8a:6e:68:47:d7:41:e0:47:
58:70:a6:08:ac:40:e6:a3:a4:69:62:6c:cb:d1:18:42:11:5d:
35:a7:8e:a2:a3:07:17:b6:be:f1:7f:aa:e9:2e:34:b8:d0:8e:
3a:15:cb:96:bd:02:5d:b5:a4:04:f5:23:fb:1b:2f:e7:32:ed:
44:ea:8b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:56 2025 by rpki-client