Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa
File: 6f477233-abe1-3ee6-ba8a-3e08779866d7.roa (raw, json)
Hash identifier: 7aptzYjVVlgDD8SE0O/aAJcsuG4atR6UX6xzVKTc1k4=
Subject key identifier: 25:33:5B:A8:FA:00:08:09:08:34:06:16:CA:67:F6:AE:E5:66:22:F3
Certificate issuer: /CN=e3370a8c-7e39-490d-985a-a478ce54459f
Certificate serial: 010D0C9F432858483B4FF3AEC6C2703484766700
Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 4393
IP address blocks: 204.52.234.0/23 maxlen: 24
209.251.198.0/24 maxlen: 24
209.251.200.0/24 maxlen: 24
209.251.208.0/23 maxlen: 23
209.251.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:f3:ae:c6:c2:70:34:84:76:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=7467b4e9-7ffe-452f-a626-aa1bbb492e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:8f:30:85:8b:e1:43:ce:59:5d:ab:50:16:
41:30:18:50:f0:4c:e2:d9:67:05:d5:48:ba:a0:61:
7a:18:7d:6b:36:ff:de:cb:74:e2:29:d8:1c:b5:d9:
b3:0e:48:2f:92:ed:89:17:74:a3:4e:4d:5c:0d:e2:
01:e7:83:35:6c:ec:8d:22:09:a0:1a:1b:97:ea:6f:
92:6f:42:b8:22:31:5f:ea:3e:6a:a1:c6:63:a7:0a:
13:0a:2e:3b:5f:da:f6:89:0e:6f:c9:5e:19:28:32:
0e:f2:c3:d9:04:23:32:55:29:72:4d:0a:a7:0c:36:
5a:54:13:55:4a:5b:4b:b8:bb:34:9d:d8:9f:be:05:
8f:3c:c4:73:78:e2:ea:95:31:62:42:75:71:c3:d6:
10:72:00:2f:64:f4:88:4c:47:04:61:10:9e:2b:bf:
18:b5:1d:ca:f5:6b:72:fd:f5:1c:31:f1:a0:0c:c9:
5b:9a:80:68:ba:f3:46:3f:00:6f:96:12:10:b8:04:
48:97:d9:39:de:9e:b9:6c:44:f1:84:c6:95:bd:fb:
f1:99:fd:23:cf:8e:ae:03:f7:74:6b:b4:34:b5:43:
7d:88:ef:2f:e7:1d:61:a6:1f:31:c3:58:4f:69:9f:
75:74:dd:10:86:48:d8:e1:80:b0:c8:f9:16:a9:d3:
51:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:33:5B:A8:FA:00:08:09:08:34:06:16:CA:67:F6:AE:E5:66:22:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl
X509v3 Authority Key Identifier:
keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.52.234.0/23
209.251.198.0/24
209.251.200.0/24
209.251.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:83:4c:52:c8:c1:31:18:fe:54:86:53:f1:c2:91:ff:86:5f:
bc:70:9e:25:97:16:ee:26:6c:5b:ab:f7:52:cf:ee:ff:fa:8a:
1e:17:4f:05:dc:55:68:af:d4:39:d7:74:c9:12:aa:aa:16:b2:
b6:ba:d6:00:22:49:5d:48:a4:f4:dd:e1:83:cb:9d:80:c8:d4:
cc:cf:6e:c7:9a:c4:89:ff:c0:4f:18:08:49:ff:bd:6c:0c:9c:
c4:62:04:1f:f6:9f:7a:89:b6:d2:1b:3b:d3:e6:ac:a4:4c:b0:
35:ab:4f:71:c3:a6:1c:a5:f1:86:3d:10:8c:81:4c:d6:c9:d8:
31:3f:1d:1c:16:08:a9:20:94:d7:f6:a2:95:bb:53:11:a6:3c:
12:d9:2b:fa:4b:41:e6:6c:12:24:51:ab:74:95:61:c4:ad:8d:
4a:9e:f6:34:3b:53:d4:d7:ac:e3:2f:da:11:cd:e8:8e:bc:c7:
d5:ea:8f:94:d8:a5:db:ca:d4:e0:73:0f:dc:31:a7:6f:57:4d:
0d:aa:b1:13:0b:5e:47:8f:6e:6e:88:b0:94:07:37:48:0a:bf:
1b:a4:19:2a:fd:d0:06:49:4d:fd:a6:32:73:4e:6f:55:49:f6:
fc:d9:db:82:bb:50:51:03:bd:13:c0:99:4d:3e:ca:b9:68:3f:
40:63:6e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:38:00 2025 by rpki-client