Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/304d7af4-df1c-3d51-85b8-c0d2c7c12c32.roa
File: 304d7af4-df1c-3d51-85b8-c0d2c7c12c32.roa (raw, json)
Hash identifier: pryIcM/BpbV0faPXBzauzF5bi+t0PH0UsxPgKrYtu9s=
Subject key identifier: A8:31:74:06:8A:A4:2C:5D:F4:E7:06:1A:F6:A9:FE:21:3B:5D:FC:E6
Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial: 010D0C9F4328584823954A77F16C04DF7631ED80
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/304d7af4-df1c-3d51-85b8-c0d2c7c12c32.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 30097
IP address blocks: 204.10.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:4a:77:f1:6c:04:df:76:31:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=811ed5b0-685e-4412-a1db-1aa53579b849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:20:af:64:46:41:2c:d5:39:1b:88:9d:66:
fa:84:a0:ea:16:f5:f3:21:f9:e8:78:dc:3f:d0:50:
2d:e4:fb:39:ec:22:00:82:eb:6c:9c:e3:4a:90:55:
05:ba:56:68:52:d4:0f:4a:a3:f4:cb:fd:33:6f:ee:
fd:f2:e0:d5:70:e1:96:e6:88:24:4e:c8:ea:fc:0f:
46:c8:b6:26:05:23:47:52:92:71:52:59:ab:c6:fe:
7b:44:6f:4b:2d:0e:79:e5:91:63:f9:5d:16:1b:80:
fd:34:b4:62:6a:e5:b0:df:3e:35:f8:51:9e:be:d5:
21:9a:6f:7f:a5:ff:8e:46:32:41:aa:94:02:d8:bd:
25:91:2e:d6:ee:ec:be:d0:63:e3:e0:b3:8b:aa:83:
3b:88:c3:41:d1:02:53:98:5c:b6:b0:33:9b:e0:25:
2f:da:83:99:b0:2c:fc:13:4a:aa:fc:0d:6c:12:2f:
27:ba:8a:23:67:7e:d7:c6:e5:25:dc:3d:6e:71:ae:
72:2f:b9:03:2f:ca:ea:bf:29:f1:e0:cf:9e:33:2c:
fc:7a:06:4e:bc:07:44:ea:3a:d4:a6:cc:3e:44:d2:
88:94:0c:ae:82:55:2c:27:66:cf:bd:cd:a4:0d:2e:
9f:4f:18:30:c1:41:0a:0a:41:3f:32:99:e4:3b:97:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:31:74:06:8A:A4:2C:5D:F4:E7:06:1A:F6:A9:FE:21:3B:5D:FC:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/304d7af4-df1c-3d51-85b8-c0d2c7c12c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
X509v3 Authority Key Identifier:
keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.10.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:cb:a0:31:6a:ee:f4:1d:28:46:e6:7a:a9:9b:94:7f:93:66:
e6:e1:9b:0e:01:0c:45:8a:af:2b:92:99:8d:1a:88:5f:6a:6e:
fb:ec:0c:98:fc:55:8d:5e:b3:3b:0a:f4:44:0b:b1:17:a4:87:
f4:e1:75:d7:ed:e8:38:b2:3a:e2:31:b4:60:b6:d3:d6:9f:97:
32:44:ab:fd:3c:a8:33:e3:97:74:e9:fe:ff:ba:e0:ec:b3:d0:
96:a4:62:9b:98:70:cf:15:c5:d5:78:a4:c2:29:df:04:62:bc:
a7:31:cd:fd:96:a1:1f:22:88:d9:ca:78:1a:52:e2:75:b4:1f:
0e:b8:af:8d:be:c2:9b:cd:2b:0a:d8:18:4c:24:71:4c:bd:32:
d3:ae:48:3b:52:92:89:5c:b7:06:f2:a1:19:3d:be:ca:ca:8a:
a8:35:80:4b:36:d8:0e:62:4e:bd:a7:7e:05:7d:35:37:bb:57:
0d:b8:b3:7c:32:89:37:b2:8f:7f:d8:e8:e4:29:e5:7e:cb:c9:
3f:ff:a4:80:3c:9e:2e:ff:0e:ed:fd:24:39:bb:a1:68:05:b2:
f6:17:8f:ed:32:e5:4d:96:cc:ba:ab:81:d9:25:61:03:7a:d1:
05:0c:9a:76:fb:00:49:9d:ab:10:f5:18:7b:c2:99:b5:c4:f7:
13:9f:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:02:41 2025 by rpki-client