Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa
File: 214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa (raw, json)
Hash identifier: jMcVTIV7QNGO9gvYYB+e7ZV6eViT4suINOIDGHfQtb4=
Subject key identifier: 07:B2:2F:F2:0E:44:26:01:23:88:38:10:E6:2E:72:59:C7:4E:5E:99
Certificate issuer: /CN=dfb59d70-0c69-4135-b2f0-61bd4d1a8263
Certificate serial: 010D0C9F432858482A8FE2B9DC1790C07E8FFC00
Authority key identifier: 3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 11110
IP address blocks: 204.13.52.0/22 maxlen: 24
2604:3500::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e2:b9:dc:17:90:c0:7e:8f:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb59d70-0c69-4135-b2f0-61bd4d1a8263
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=d2e483b8-534a-43a2-9146-b5420c594d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:64:e7:4b:1d:41:b0:60:75:c1:47:8c:6d:
a4:cc:04:fa:f2:43:36:9d:0f:00:dd:a7:41:eb:1b:
0a:51:47:23:82:7c:18:c9:9c:43:00:e9:7c:57:b3:
89:8e:32:23:c4:5a:7c:01:f0:8c:47:a4:db:b4:67:
e2:9c:68:06:b4:1d:08:9f:4f:94:5c:81:e7:3c:93:
a5:8a:d6:1f:41:49:c3:dd:27:5b:08:43:b9:f4:dc:
4e:2a:63:cf:5e:82:0c:7b:23:9d:6d:ee:13:41:bc:
39:db:d5:01:f9:05:89:ea:a9:76:c4:03:80:56:d8:
9f:d2:b5:2d:8d:07:91:09:50:e6:9f:f1:38:74:0c:
38:dc:27:6b:af:1d:48:d8:66:87:9b:fe:cd:92:3d:
4a:81:dc:54:dd:08:aa:f8:82:61:45:48:ac:73:b8:
61:c9:33:19:2b:4e:3f:bf:78:96:ed:0a:13:b9:c6:
b0:9d:15:78:78:eb:82:ac:94:1c:b2:af:96:da:a0:
9a:37:0c:cc:7a:2f:f9:80:e6:3b:a2:31:9e:33:34:
b5:82:27:0a:1f:75:90:d1:07:08:aa:65:b2:f0:1d:
62:9a:c7:7a:2f:de:be:64:8d:85:fc:f5:40:30:b9:
72:fc:89:64:1b:64:8f:28:6f:2a:80:e9:1d:ba:2f:
11:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B2:2F:F2:0E:44:26:01:23:88:38:10:E6:2E:72:59:C7:4E:5E:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.crl
X509v3 Authority Key Identifier:
keyid:3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer
sbgp-ipAddrBlock: critical
IPv4:
204.13.52.0/22
IPv6:
2604:3500::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e3:82:2e:39:ed:e4:4a:04:e9:5d:77:34:82:fe:c5:1c:17:
60:2c:1b:1f:78:9c:99:0f:06:bb:46:6f:76:e1:3e:41:ce:59:
1b:29:2a:9c:43:f4:d6:ba:43:22:5b:9e:5c:7f:50:b4:09:a6:
e8:53:f1:05:7e:5c:b7:8b:94:dd:05:98:09:bd:99:30:b0:c2:
69:aa:06:d7:95:80:cf:9c:69:bc:ac:e7:95:06:35:20:d6:3b:
55:41:1d:75:f9:78:62:9f:ef:34:21:c1:4b:b1:7f:42:41:2c:
0a:03:b1:01:b0:36:70:c7:d4:88:4c:e4:5f:8a:0b:ab:cb:ca:
99:f7:0a:2a:ad:64:90:3d:5d:46:2f:a0:87:e7:48:20:e7:ff:
c3:23:b6:f7:69:46:49:46:d8:a2:ce:44:ab:97:f0:94:76:8e:
65:f8:41:d1:d2:b2:42:2f:eb:0e:41:63:13:6f:6c:c8:fe:2c:
92:91:5a:8f:c9:8a:47:98:9c:16:5f:64:8d:75:69:4a:9e:7a:
55:b8:01:64:7e:e2:5b:04:d1:dd:58:62:4f:6b:34:b7:f7:ca:
34:a9:da:71:da:c2:64:ad:62:b4:6b:b5:fb:06:a1:7a:ea:6b:
88:70:e6:3e:b7:f2:7d:ee:26:d7:e0:75:b4:06:5d:a5:31:ec:
da:e0:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:54 2025 by rpki-client