Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/40a20a7d-02f2-37bd-8133-1efc8395c017.roa
File: 40a20a7d-02f2-37bd-8133-1efc8395c017.roa (raw, json)
Hash identifier: lrRfMdGZOSz52V0RQdNcpNfaNPPmxSpj1Fw98O6Iyf4=
Subject key identifier: 01:D4:E8:30:56:43:BE:43:8C:F6:4A:09:41:84:6F:01:98:04:D7:FA
Certificate issuer: /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial: 010D0C9F4328584886B07D1426ECF64EDE3E8A60
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/40a20a7d-02f2-37bd-8133-1efc8395c017.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 30513
IP address blocks: 204.14.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7d:14:26:ec:f6:4e:de:3e:8a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=2942806a-3afa-49d6-ad17-26454741c6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:8f:71:c8:c7:6b:9e:c8:6c:04:a6:94:42:
d2:ba:61:71:4a:39:7a:e7:96:68:9f:32:d1:11:30:
1c:7e:bf:61:7c:6c:08:94:8c:35:54:f5:8a:0a:a3:
56:b5:68:45:80:63:2c:0a:7c:14:da:a1:2e:f5:79:
3f:be:43:2f:68:75:29:70:04:d7:ac:cb:0f:2e:f3:
db:39:d0:a8:14:68:b4:84:83:bf:dd:61:75:f1:b7:
3f:f2:8f:e8:56:c3:66:a7:5f:60:1e:65:73:ec:97:
4d:fa:44:52:3f:76:e5:1a:a1:4e:8a:18:23:94:5f:
61:4d:84:d7:86:c1:7a:e3:20:76:05:ad:92:37:de:
be:8a:16:dd:b4:8d:2c:58:1f:1a:86:2f:77:29:27:
3d:d5:c8:1c:7b:90:f2:96:58:a2:13:81:0d:7f:a6:
0d:3b:0e:55:6c:f4:16:4a:12:cd:9d:a8:c2:a6:f3:
a5:c5:68:a1:14:30:ba:72:a2:83:bb:8b:8f:b2:77:
03:36:4b:eb:d6:dd:59:60:b7:6d:f6:02:2a:2e:fa:
a3:1a:96:01:f1:a5:5a:6f:68:e1:cb:b4:77:50:20:
ad:26:f4:43:62:21:ca:ab:01:74:90:af:5d:df:94:
49:3c:22:0e:e6:d7:16:8d:65:87:e7:c2:a9:ee:5d:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D4:E8:30:56:43:BE:43:8C:F6:4A:09:41:84:6F:01:98:04:D7:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/40a20a7d-02f2-37bd-8133-1efc8395c017.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl
X509v3 Authority Key Identifier:
keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.14.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:cf:a2:76:68:1d:e8:7d:fa:54:40:f5:af:f9:dc:5d:5d:11:
c9:1b:95:d4:60:97:1c:84:c2:05:d3:90:8c:cd:a9:c1:ef:a8:
d0:a5:ad:21:b7:3c:f8:8f:5e:19:94:99:6a:89:f4:62:f8:2d:
d6:be:e8:4c:24:f2:ba:5b:6a:62:5b:ce:82:61:0c:31:92:81:
8f:9c:b5:6b:5d:01:f7:57:a6:ba:8d:c2:44:2e:33:96:1f:e4:
69:5e:f3:59:84:77:b6:28:82:9f:ad:57:64:8e:19:80:8c:02:
ad:23:f4:95:1f:d3:86:97:84:11:bc:09:bf:a1:8a:11:d3:35:
4e:6a:da:eb:56:10:2d:f2:fd:eb:54:d0:9d:88:55:20:c9:f3:
b1:c2:a4:65:c0:1c:ec:73:30:15:c8:a7:88:2a:cc:48:de:ae:
67:f2:35:c1:c0:4a:e2:a7:39:32:da:1f:6d:08:68:c3:8e:55:
d9:47:eb:c1:fa:cf:db:7b:f3:8e:8e:17:d4:cd:df:c1:fe:c8:
69:fd:eb:35:fb:bc:0e:14:a1:fb:af:04:25:73:1b:25:94:09:
bf:c5:01:a0:9a:e6:03:c3:2f:57:2a:8e:36:67:b6:5d:df:7c:
f2:e0:dd:f1:62:ec:96:0d:98:54:01:c1:eb:da:9b:d2:bf:d6:
7d:db:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:17 2025 by rpki-client