Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0263677c-df81-3041-918c-2048389fbd3a.roa
File: 0263677c-df81-3041-918c-2048389fbd3a.roa (raw, json)
Hash identifier: nl1wWurbSw31nX5CcvF9inDX5WphLsgFYG49DO9cCro=
Subject key identifier: 73:F9:4B:99:D4:C5:76:24:91:FC:A3:25:96:E2:BB:90:E5:44:AC:9C
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865303FBE27A7C5BC5A91F200
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0263677c-df81-3041-918c-2048389fbd3a.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 204.111.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3f:be:27:a7:c5:bc:5a:91:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=81bb24ad-2b79-4803-af94-ac740e17ba80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:23:3d:83:69:92:10:03:0b:c8:89:28:46:
d6:58:37:d3:12:30:37:a1:d0:6e:c1:1b:ab:0e:f8:
fb:15:36:bf:cd:b8:8c:27:6b:6b:83:8d:08:8c:26:
f0:7e:08:e9:3e:de:39:f3:3f:52:29:7f:ec:77:e3:
5a:a7:c2:b1:cd:9b:0c:98:ef:59:bb:9c:2b:10:6c:
f7:03:5e:d5:e0:21:e4:2a:19:aa:38:a5:97:60:8c:
e3:94:a4:9e:66:56:a2:78:68:56:68:23:f4:60:0a:
89:c9:15:2e:30:90:f6:24:cf:d9:cf:1a:da:9b:c6:
4e:4f:a3:80:87:c6:67:db:42:cb:20:f4:53:ea:bd:
ba:2e:be:a1:eb:d4:7a:62:79:bf:ee:7e:29:2d:2d:
b4:de:d6:dd:8e:05:db:7c:ae:4e:07:2f:e1:ae:88:
f7:ca:19:0c:47:7f:f9:7e:dc:b3:bd:6d:65:cd:b2:
b5:78:2b:e0:d3:75:01:fc:af:7c:67:b5:6f:f7:39:
bb:31:35:c9:99:a1:0a:63:13:bf:88:88:ed:59:be:
a7:b1:fd:6f:d1:aa:6a:f7:f0:88:25:08:2e:74:50:
13:87:4b:10:a2:09:6b:f4:b8:22:e1:2d:e6:ee:de:
c1:1d:78:5b:fe:b0:1b:e9:fb:40:8b:53:07:3c:c9:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:4B:99:D4:C5:76:24:91:FC:A3:25:96:E2:BB:90:E5:44:AC:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0263677c-df81-3041-918c-2048389fbd3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
204.111.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:cc:cd:b7:a8:f6:85:4a:4e:2a:ba:a0:d8:27:94:9f:9c:48:
17:b0:84:15:d4:c1:25:f1:db:4b:97:37:05:07:dc:47:bb:22:
78:ce:76:08:76:cd:5f:ca:09:63:bc:81:e2:bd:4d:1b:87:6b:
40:a6:73:08:82:47:5f:62:7d:ff:fa:12:45:72:05:a2:44:11:
12:74:ff:de:70:99:d4:bb:80:35:8a:29:dd:63:62:99:62:c4:
43:f9:f7:b3:fa:91:15:2b:4e:cf:0b:95:b7:61:5c:72:e9:b5:
38:28:44:52:c2:00:a2:55:be:4a:b3:f8:9b:84:1a:3a:48:56:
e8:3c:1b:52:ef:1b:50:5f:f9:f1:51:58:e2:9c:91:d8:55:d2:
61:4b:66:c2:e4:cf:1f:dc:79:c1:10:85:28:a0:5a:4a:7c:c7:
91:96:28:d8:70:66:f3:5e:39:0e:28:56:44:3e:ed:c5:dc:d9:
62:23:06:2f:83:94:56:d0:cd:ea:c6:a8:7a:f7:c1:1d:32:43:
54:d9:1c:f6:3e:84:ba:c2:a3:7d:72:c2:54:2a:a0:11:ee:25:
50:6c:69:66:01:cc:2b:3b:3c:33:6e:bd:68:36:e5:07:44:1b:
69:8c:1d:18:5f:23:3b:3e:b7:81:98:25:c1:af:58:66:90:bb:
42:e4:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:24 2025 by rpki-client