Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa
File: 4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa (raw, json)
Hash identifier: dWfsnuoVFaBrY84PN2Ok8fES3GEbMqLHNYI8OPdSQQ8=
Subject key identifier: 93:AC:94:85:38:7D:DD:4B:FF:12:86:D8:F3:29:EE:D6:4D:F5:7E:00
Certificate issuer: /CN=2a093e3f-1d9b-4e68-9317-1de77daf9698
Certificate serial: 010D0C9F4328584869606D35267E05B19018AB80
Authority key identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 174
IP address blocks: 204.114.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6d:35:26:7e:05:b1:90:18:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a093e3f-1d9b-4e68-9317-1de77daf9698
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=fb5238cb-fb8e-4f83-8e1b-d42bb226fa6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:62:01:f8:26:4f:2b:83:c1:a7:85:08:99:
e6:f8:65:ad:8a:a6:fc:46:fd:7b:fe:fd:b1:5c:d7:
bb:99:cd:f4:9a:58:a3:e8:95:39:19:96:13:8e:5e:
6f:32:44:44:e0:49:6d:8e:71:a5:90:b7:bf:d8:82:
12:26:66:07:a7:69:e3:15:4a:e9:71:27:a3:c2:6a:
78:c3:4c:a1:11:38:29:4f:5b:30:92:30:2d:ab:6e:
74:b2:c9:50:db:1c:93:be:43:bf:b6:45:71:ab:6c:
07:8c:c9:46:60:40:cd:18:74:be:c3:4d:ea:ae:26:
1f:63:07:e8:99:35:c1:04:2a:db:38:ba:78:87:1f:
93:0e:8b:bf:31:6f:7f:df:0f:44:3f:1b:42:87:62:
ed:6e:7d:a5:6a:15:e9:c8:1b:71:0d:15:0d:fb:5f:
96:4a:64:d7:ca:06:79:65:46:07:24:46:1c:37:2d:
f5:51:ac:be:d0:ce:18:2a:31:9c:49:99:93:42:2c:
84:f9:2f:dc:d2:27:c8:47:29:b5:ff:92:56:56:b8:
5c:8e:67:b7:69:83:45:5e:cb:63:c3:77:36:f2:e4:
3d:a6:af:ca:67:a5:da:4e:0c:20:a8:61:22:87:a1:
06:92:87:2c:01:ae:34:e9:04:3a:38:a6:d9:43:f7:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AC:94:85:38:7D:DD:4B:FF:12:86:D8:F3:29:EE:D6:4D:F5:7E:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl
X509v3 Authority Key Identifier:
keyid:C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer
sbgp-ipAddrBlock: critical
IPv4:
204.114.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:a1:30:b7:25:b5:cf:a0:d4:34:cd:d2:48:03:12:79:54:0b:
78:ab:2a:45:40:f6:db:49:24:af:72:34:ed:e2:51:b3:6d:d5:
7a:94:bf:58:e2:ae:99:28:c2:99:49:cb:71:6f:6d:86:20:97:
3f:c6:48:f5:89:bb:e1:ca:2c:0c:00:5d:67:cc:80:ea:e9:05:
64:20:d4:d2:24:5e:9e:8a:3d:b4:83:4d:96:5d:1b:de:e9:a9:
fd:7e:a8:9b:83:d1:38:46:4f:22:c3:63:90:bf:9a:0b:7f:1a:
00:90:99:92:d5:86:e3:30:b0:e6:77:9b:c0:47:07:5b:cf:07:
d7:98:fc:12:de:06:98:f1:b2:8f:f3:76:de:47:c3:e8:01:6b:
2d:5a:a7:8a:67:ef:12:fd:12:8b:ca:04:b7:c7:97:d4:e8:7a:
c5:bc:f4:07:99:df:d9:f0:6d:84:5f:e3:16:1f:60:a5:b1:fb:
a1:cb:0c:09:63:bb:aa:aa:2e:0f:56:0b:32:11:b3:e5:e8:20:
df:11:4f:b1:af:b4:bb:b4:03:32:ac:42:6b:4b:0a:92:9e:32:
e6:3a:99:81:ac:78:78:25:a1:fb:25:60:88:8e:84:59:18:5b:
4e:6c:ab:4a:48:0e:a6:77:79:b4:97:8e:b7:db:1f:e3:10:32:
07:78:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:45 2025 by rpki-client