Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/53fdbdf2-a0bc-3fd6-9a48-1c9ccbc1af83.roa
File: 53fdbdf2-a0bc-3fd6-9a48-1c9ccbc1af83.roa (raw, json)
Hash identifier: wLcFqkcRjHV2PkdHm7eQizmvks1TKEn0+Gj1J9Yl500=
Subject key identifier: 15:4E:9D:40:87:1A:03:C2:D5:BE:D2:FE:63:4A:1F:8A:A5:63:EF:7A
Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Certificate serial: 010D0C9F43285848494571F1E6AFBFD8D713F700
Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/53fdbdf2-a0bc-3fd6-9a48-1c9ccbc1af83.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 18587
IP address blocks: 204.209.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:71:f1:e6:af:bf:d8:d7:13:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=dc1973a5-04a1-4574-ab92-4181b2cde19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fd:2a:46:01:7d:c0:0e:a0:91:2c:e8:c5:67:
8b:f3:2e:30:c4:55:46:43:eb:3f:67:7b:99:9d:ed:
86:d9:69:76:95:0c:7d:96:0d:fa:65:2e:be:05:4d:
19:58:a9:70:c1:9a:7a:4b:8b:d9:3f:aa:e5:e7:8b:
c1:2f:ad:c0:51:f2:26:c7:3d:09:f5:b0:53:61:ff:
a8:ce:da:b4:ef:5b:8b:89:85:20:2d:70:28:de:28:
f0:0a:67:1a:27:de:8b:22:c4:dd:28:34:01:a3:7f:
94:1e:b5:79:74:74:7d:1d:13:bc:d1:c2:fc:da:f8:
87:91:d4:57:e7:b9:d1:60:e7:e8:55:eb:96:8a:2b:
38:83:30:9f:2f:7f:b1:6c:1e:f9:44:2b:25:9f:22:
4f:40:3b:88:31:20:39:d8:f4:90:8e:32:53:c7:b9:
44:3f:41:88:de:19:f6:8a:a3:fd:ed:28:3a:4e:5b:
d6:86:d9:a4:00:f3:3f:89:db:3d:77:99:ee:02:95:
4f:cf:5d:f0:e7:1e:c0:5a:4e:84:af:0f:be:b0:dc:
ff:8a:53:a0:05:21:e8:b9:43:a6:df:49:85:32:33:
4c:b2:5e:a0:3b:97:d1:b4:f0:e3:67:86:40:c9:85:
67:2f:ef:a9:bb:2a:8a:ea:f3:81:a9:6a:28:b6:e6:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4E:9D:40:87:1A:03:C2:D5:BE:D2:FE:63:4A:1F:8A:A5:63:EF:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/53fdbdf2-a0bc-3fd6-9a48-1c9ccbc1af83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl
X509v3 Authority Key Identifier:
keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:00:e0:3b:69:65:46:87:63:7a:0c:3f:53:dc:dc:0d:b2:76:
e8:25:67:62:9a:dd:01:31:a9:06:79:15:4f:8d:d2:d6:f9:2a:
1f:12:82:6f:a0:24:fc:c9:ee:60:55:12:84:c1:1a:cd:13:3f:
e1:b7:12:5e:b9:23:e9:50:ca:78:98:73:0d:68:68:28:43:2e:
1e:ae:51:cd:10:17:8a:2e:16:f1:ec:7f:00:d1:fd:76:65:f7:
ac:e6:5f:1d:9a:d1:5f:16:ad:7b:ce:b4:fd:e4:e9:20:09:a6:
06:a0:e8:c6:b8:97:4c:e3:cc:60:fa:2d:38:6b:94:42:d3:fd:
b7:57:ea:86:47:66:4e:77:47:b2:f1:68:31:35:67:df:36:b5:
ed:c6:b3:17:55:d5:be:70:ff:45:d3:c1:8b:eb:ee:1d:c6:87:
fb:42:da:07:df:c8:6a:50:54:93:47:e1:f7:99:e7:f7:a2:97:
85:ef:e1:78:d8:2c:5a:03:ad:14:c4:67:73:14:7d:94:a6:5f:
dd:47:ab:52:8d:b5:e3:2c:a5:80:c3:c7:85:8e:91:29:d7:e4:
37:b4:e3:e2:af:c2:0d:70:1b:bb:00:50:b3:cc:15:f5:4b:10:
f6:ae:f6:4e:96:ae:cd:45:49:61:86:5c:d7:9f:82:25:26:d6:
fc:19:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:27 2025 by rpki-client