Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa
File: 333c4625-2011-380b-81cd-9ac18b847081.roa (raw, json)
Hash identifier: VXzuL/mMUo+b9pyEQ6xM6BR9UaT9FvNempMmBnmjbK0=
Subject key identifier: 79:22:70:CA:16:A5:3F:06:5D:0F:24:8D:94:4B:7B:43:0A:C9:28:F7
Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial: 010D0C9F4328584819CFD486C09B5DABC2698218
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 62720
IP address blocks: 204.186.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d4:86:c0:9b:5d:ab:c2:69:82:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=ce71da0e-5bbb-4855-a8ca-1f70a2ffdbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9e:66:ee:df:66:90:2d:e5:77:8e:19:08:29:
1a:85:00:db:38:af:d6:38:03:e0:ab:91:c5:0d:c2:
7c:5a:b2:5c:cd:93:4b:a7:33:9d:ee:63:de:a3:6c:
11:f2:d2:a5:34:30:93:ee:d3:9a:61:f0:44:36:e8:
ef:5a:59:f1:16:b5:a1:0d:ef:07:1c:1e:67:97:e7:
7b:63:bb:05:cd:12:fc:2d:cf:11:0b:1a:10:41:3e:
ef:32:e1:f7:9f:2d:c6:49:e2:6d:75:c0:b8:0f:a4:
01:6e:bc:68:9b:e0:be:b2:03:c8:31:ec:5b:ce:93:
47:c5:50:7d:f2:dd:76:a7:16:ca:fb:bd:d6:eb:36:
b3:a7:51:5b:be:63:cc:65:dc:4b:1d:52:5d:d4:f9:
7a:cf:dc:3e:79:6b:b2:61:80:58:9e:92:73:15:40:
cd:70:5a:50:c3:35:9c:86:6a:12:6d:d8:ab:64:12:
8a:4c:c8:db:7d:b8:68:f7:2d:64:9f:e7:ef:ca:ea:
ee:32:8b:ee:d9:fb:fc:fc:56:87:15:dc:56:01:c6:
7c:fe:5b:34:7a:7d:df:56:39:d3:b8:97:94:60:e4:
79:5b:e6:50:56:95:0c:10:22:15:f5:3e:36:89:31:
45:46:e3:9d:17:7a:69:7b:15:40:c4:0b:1e:af:de:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:22:70:CA:16:A5:3F:06:5D:0F:24:8D:94:4B:7B:43:0A:C9:28:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
X509v3 Authority Key Identifier:
keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
sbgp-ipAddrBlock: critical
IPv4:
204.186.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:11:d7:eb:79:eb:aa:02:bb:48:20:08:02:95:03:36:0f:f6:
b1:a5:1f:bf:33:d2:14:84:e8:e8:df:ee:67:2b:72:42:e8:33:
28:60:55:14:f5:da:83:b7:94:b9:e0:75:fc:dc:98:40:1e:88:
b6:39:2b:ea:4e:39:bf:47:7a:87:5e:cf:0c:71:0b:c7:38:73:
11:7f:72:b2:fb:5b:87:2c:e8:30:f4:29:49:a2:cc:a3:57:4d:
89:e2:76:3c:c3:e9:46:6f:84:d6:b6:35:70:c4:da:75:33:9f:
b6:ad:4a:4f:f8:cd:64:fd:41:2c:71:ce:28:99:c0:47:47:86:
18:eb:7e:72:d7:30:21:89:fd:4f:a6:59:90:ad:33:5d:9f:49:
89:df:24:c6:9d:7e:f8:ed:1e:8e:f0:fd:8d:3d:37:ba:cc:1e:
03:3d:c2:24:c6:44:2b:0c:0d:77:2f:62:46:8a:cd:11:61:22:
c8:98:38:e0:9f:01:1b:2d:ba:ed:77:09:6a:53:d6:b4:29:e5:
19:28:37:0c:54:da:eb:42:2d:a4:5a:a1:b4:78:3b:d2:06:7c:
86:0b:54:05:e1:d8:4d:c7:7e:74:fe:e2:11:7c:9c:f8:a2:c1:
8a:ec:a7:d8:40:b1:de:22:bc:72:71:9b:63:e8:ea:52:8e:ff:
fb:3f:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:50:50 2025 by rpki-client