Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa
File: 3cff4f2a-68ad-3c28-8482-467530c2801c.roa (raw, json)
Hash identifier: zNU2S5i+/8EAL2Zhq0I4YKAnte9TSfALXuGZFDbIakU=
Subject key identifier: F5:B1:CF:F6:58:C9:27:4D:86:3E:B1:2E:98:E0:DB:48:3C:22:39:5D
Certificate issuer: /CN=c3c300ec-9927-491d-bd77-8107cc89e4f3
Certificate serial: 010D0C9F4328584832F034830FDA1C8CE7AB2900
Authority key identifier: 9C:DD:29:BA:43:16:0D:28:7A:F0:DE:BD:86:EE:1D:C4:34:36:71:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 376
IP address blocks: 204.28.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:34:83:0f:da:1c:8c:e7:ab:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c300ec-9927-491d-bd77-8107cc89e4f3
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=c1a615a5-486c-4fa1-97aa-945ae32e7c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:fe:29:8e:b7:07:45:65:02:78:7e:7e:6c:
55:39:9b:35:5f:77:f3:0b:f7:8b:37:7d:d1:af:16:
5a:bb:16:ee:6a:03:ce:bc:6b:9e:a1:5a:f9:a5:2a:
8d:3e:ae:b0:3c:97:06:5d:9a:d3:b1:30:f6:29:56:
05:51:54:bd:b0:b1:e5:8b:7a:9b:7b:07:db:8e:f0:
ea:b0:09:df:48:dc:e5:f9:8c:c1:4f:63:94:c5:e8:
0a:ef:3b:54:11:ea:da:1b:e0:c8:a1:2a:27:4e:00:
ce:57:17:8d:00:11:11:5b:a1:c8:e7:7c:01:54:ae:
6f:d8:e2:50:11:ad:d3:fa:80:69:ae:ac:37:20:4c:
63:32:f3:ef:33:79:13:68:69:4d:8b:42:aa:83:8c:
d7:16:59:04:78:a0:03:d2:ef:0a:ba:34:2b:bb:e9:
4e:d7:85:66:64:f9:50:97:40:a7:47:18:bd:55:01:
27:b8:fd:b2:54:aa:90:5a:34:c1:06:d6:8c:8d:ce:
ca:2d:00:56:97:8d:d9:46:6c:9b:c9:df:5a:5d:54:
5a:0d:52:c8:cc:57:cd:56:cb:c5:62:07:8e:c1:50:
97:7a:19:cb:11:71:d3:05:3e:26:ff:d1:42:75:28:
4a:56:87:ed:73:47:8b:bc:04:6e:98:50:f6:55:2f:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:CF:F6:58:C9:27:4D:86:3E:B1:2E:98:E0:DB:48:3C:22:39:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.crl
X509v3 Authority Key Identifier:
keyid:9C:DD:29:BA:43:16:0D:28:7A:F0:DE:BD:86:EE:1D:C4:34:36:71:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.28.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:e0:94:bb:b1:89:1b:b5:78:5b:d1:af:99:41:a5:f1:4b:ec:
85:18:d4:55:2b:28:5d:12:69:d2:ec:2e:b3:9d:78:24:34:b2:
ec:35:66:53:81:e2:52:ec:6e:91:fd:c3:4d:82:95:7a:ff:94:
1b:2f:42:c4:b6:ee:6e:68:58:65:4c:d2:e6:0a:e1:3d:26:f7:
f6:66:48:e9:a6:87:b8:05:96:e2:c3:4a:76:a3:32:2a:40:7f:
d7:bb:df:72:ac:25:b4:21:15:29:37:46:0c:84:01:30:0e:cd:
44:5a:4a:a0:cc:29:9e:3d:40:9b:8b:7c:bd:b3:ba:c8:ca:3f:
cc:d7:3c:a6:7b:6a:bf:b6:a5:b4:4a:a4:8c:a6:21:f5:a3:2b:
2e:38:fa:96:59:16:7a:67:0a:0d:f5:d5:ed:af:ee:c3:02:6f:
9e:1a:bb:98:e3:a8:81:37:cd:fd:56:2f:fd:0f:f4:14:a6:dc:
f9:c5:48:79:dd:96:af:39:d6:bf:71:50:cc:50:4a:cf:9c:1f:
cd:55:4a:4c:8a:b8:92:aa:d1:cf:e2:d0:cd:de:a6:84:1a:4e:
6a:4a:11:1d:ca:c6:1c:17:33:6c:db:3a:a8:0c:0e:fc:9f:9a:
3f:fd:8e:54:a7:27:68:ff:b1:35:b5:5b:cf:5e:44:01:3b:21:
a2:5a:8a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:28 2025 by rpki-client