Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c2307c97-f843-322f-bfde-f7c8b828fefa.roa
File: c2307c97-f843-322f-bfde-f7c8b828fefa.roa (raw, json)
Hash identifier: 4s5CPH6krIoAVSbaIROQX16SN/9qUCTx8bMvNw1f3XM=
Subject key identifier: F6:11:C4:A3:30:E8:55:84:F0:62:29:15:5D:BF:4C:20:39:47:A6:C1
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3DBD230FD7E3727072D0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c2307c97-f843-322f-bfde-f7c8b828fefa.roa
Signing time: Mon 30 Dec 2024 18:10:38 +0000
ROA not before: Mon 30 Dec 2024 18:10:38 +0000
ROA not after: Sun 30 Mar 2025 17:10:38 +0000
asID: 36850
IP address blocks: 204.85.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3d:bd:23:0f:d7:e3:72:70:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:38 2024 GMT
Not After : Mar 30 17:10:38 2025 GMT
Subject: CN=62820862-5f64-43f5-b74b-3651e8ab6ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fc:a6:f9:0c:f2:ea:b1:02:ca:c5:6a:49:eb:
3e:09:48:7b:c4:04:a9:3c:13:ec:c2:33:36:30:4c:
37:89:dd:43:3d:7e:25:10:d1:41:c3:42:ae:ab:8f:
57:bf:31:59:d4:22:41:59:74:4f:3f:26:92:1b:51:
00:c5:90:78:6a:62:c3:4a:94:2b:d3:31:b0:80:4c:
6b:53:ec:6d:13:2b:09:4a:59:6a:4f:c7:a2:55:c9:
78:fc:b6:56:74:fa:74:5d:44:4b:67:95:f1:cf:72:
28:49:a4:d7:24:53:4b:59:7d:e9:c3:42:18:bd:fd:
83:42:ab:06:36:0b:e9:cf:59:b0:ed:15:7f:6a:59:
b2:2a:8d:07:5a:e1:d9:81:10:2c:3d:76:ee:05:53:
1d:54:de:b2:ec:48:c0:05:59:ec:62:44:da:5c:52:
b3:be:e6:d2:f9:20:fc:a1:f0:a1:f7:ef:de:5a:96:
ff:b3:0f:a5:60:c9:d0:f4:b8:63:19:7d:97:85:65:
58:93:a1:f8:f2:98:48:bc:88:21:cd:25:88:5c:dc:
76:5f:93:13:f6:a7:c7:93:c8:78:4f:8c:6c:28:cf:
74:5b:67:99:82:d5:ed:a6:e1:cf:58:ad:b0:61:7b:
70:4e:1f:e1:c4:e0:2c:68:c0:8e:4a:85:48:ee:a1:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:11:C4:A3:30:E8:55:84:F0:62:29:15:5D:BF:4C:20:39:47:A6:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c2307c97-f843-322f-bfde-f7c8b828fefa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.85.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c9:a6:c5:e4:c8:0b:8b:a8:3e:d9:4d:83:47:90:58:71:94:
77:63:49:72:d7:bb:c8:d3:bf:42:96:bb:2b:c7:43:af:75:48:
20:62:26:48:92:c9:de:00:87:d5:51:1b:55:84:2d:8b:b4:d6:
e0:86:de:d1:fb:14:c7:b2:c2:57:31:4f:df:fc:9c:9e:06:33:
8a:a4:bc:f8:cf:ff:26:1f:7c:17:19:20:f2:11:24:6b:23:86:
e0:62:40:50:ca:6b:9a:26:77:b9:fa:bf:26:50:2b:f6:e2:74:
b1:ac:eb:1d:83:87:bc:e1:c2:3e:5a:74:28:f7:4a:ac:de:58:
c2:ce:e3:e3:9a:0d:0f:f1:b2:f8:bd:de:d1:98:5c:73:0e:7f:
a3:d3:9e:fc:b6:63:6b:0d:fa:05:ea:cf:52:f2:50:9d:55:64:
da:92:17:8b:0f:47:39:0e:ca:b3:49:8a:e8:e9:7a:ee:05:fa:
17:96:9e:43:2e:f8:5a:a5:ac:31:92:2a:aa:b2:81:74:62:c5:
6f:ca:2d:48:2b:c0:e7:0d:a8:b2:7c:c6:20:4d:fd:8e:2e:8e:
16:be:54:e7:43:31:d6:30:4d:c5:75:8e:db:67:e1:ec:cf:b2:
b8:bd:9d:0b:cc:32:7a:53:2d:d8:cd:ea:4a:8a:7e:9c:64:1c:
c3:a1:f5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:53 2025 by rpki-client