Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa
File: d23c1663-1dc9-338f-b7d7-799b68465589.roa (raw, json)
Hash identifier: HUXve0Gx+PVaN8ID8/ZUHv1xZsj+BcKjG2XxftDNyrk=
Subject key identifier: 02:71:EF:AB:7C:50:43:90:85:5C:14:C9:50:08:7B:22:D5:41:80:06
Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d
Certificate serial: 010D0C9F432858489A3B4CC34B0A73F94013BA80
Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 77
IP address blocks: 204.9.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4c:c3:4b:0a:73:f9:40:13:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=f9b77bb7-4d93-4e2b-9721-6ebd46dbb589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:51:b9:4a:47:08:f7:cd:93:d9:f1:64:e0:
8d:41:e6:1b:15:a9:2d:58:d9:4a:81:e2:44:71:9a:
c0:50:0b:46:b0:a5:be:4f:b2:8c:f3:cf:1e:4e:44:
2e:a2:bb:c5:a6:f4:d0:9f:97:56:76:a9:d0:41:74:
61:bf:ff:72:4a:3a:e5:3e:75:21:27:7c:29:02:8a:
a6:4f:90:47:a7:b1:5f:71:f6:9d:6b:8c:c2:18:bc:
28:1d:be:82:69:09:74:a3:34:ab:23:2e:40:1f:d2:
14:c6:79:38:ab:4c:dd:36:ff:a2:fe:ff:7f:97:18:
39:91:7f:4d:84:75:0c:12:f4:0d:63:dd:80:71:46:
1b:b1:1d:e0:77:be:c6:37:59:d3:a6:1b:2e:74:ac:
0c:74:9e:f1:f0:bb:c1:81:14:90:35:01:6a:20:4a:
72:31:6c:18:6c:fc:4a:81:11:3d:76:c7:28:3a:c5:
52:86:a9:7a:8d:7c:a0:07:28:6c:de:6d:2d:0d:7e:
54:f1:e9:9d:72:d2:47:c4:66:1f:ac:be:97:53:15:
57:93:8d:d3:be:06:9f:5e:b3:2a:fe:4c:3c:cd:31:
1d:e8:4d:e9:a1:4b:bb:94:f3:4a:8d:13:cf:e0:a3:
59:88:b5:29:ca:d4:6f:ac:0a:b8:5d:92:04:2d:96:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:EF:AB:7C:50:43:90:85:5C:14:C9:50:08:7B:22:D5:41:80:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl
X509v3 Authority Key Identifier:
keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.9.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:11:9e:05:12:f9:05:04:66:76:b2:2b:7f:77:b3:83:33:d6:
a7:2b:66:51:e1:b8:b2:61:bc:6a:2a:28:96:2a:fa:68:14:72:
b9:bf:03:fe:1e:53:96:27:78:1c:e1:8a:04:8a:e7:e4:5a:d3:
11:29:78:a0:eb:dd:52:15:72:54:98:8e:e0:1a:73:d7:f3:fc:
b3:44:48:ed:30:22:2f:30:7d:7c:d8:30:58:6a:cf:57:35:4e:
7f:c8:50:a9:02:cf:ab:8e:9b:22:a4:a8:e9:45:3e:6c:b2:06:
7b:ef:2d:82:6b:a8:19:04:7d:80:7a:c8:46:f2:0a:5b:f6:e5:
01:97:57:c7:2d:39:2a:ce:67:04:5d:59:61:6e:a1:51:31:53:
f4:c3:68:09:d0:55:2e:64:74:be:5d:87:68:cb:66:e2:b7:70:
8d:99:ee:74:0e:b7:9b:de:6e:35:e6:f9:ff:2b:d0:4c:e2:73:
65:54:21:b1:3a:c8:b2:16:e3:77:6f:c5:2d:80:25:d4:0d:d8:
e8:af:c9:f0:62:3d:71:fc:36:c7:46:24:bc:bf:e7:7f:23:5a:
5c:4d:5b:13:2f:08:15:3b:2c:46:40:0d:0f:3a:61:35:d2:6a:
42:e1:a1:5a:69:c9:f9:b9:52:10:38:72:07:b5:42:24:42:78:
09:4b:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:28:15 2025 by rpki-client