Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa
File: c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa (raw, json)
Hash identifier: +mBXRjw4qlIXhSB78yefV6Lh3pp1RZurcJtWtEkehac=
Subject key identifier: CF:C1:F1:EF:12:6E:E6:EE:73:5F:6D:BE:B1:F7:6F:0F:E7:77:69:15
Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial: 010D0C9F4328584819CFD3FFCCC4783C471FFD80
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 16548
IP address blocks: 204.186.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d3:ff:cc:c4:78:3c:47:1f:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=7eb677af-356b-4069-a505-91d0c44c789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:57:c3:a9:a8:bb:95:cf:0c:e3:10:aa:01:
de:a0:8b:ef:c0:dc:0f:cb:99:e9:e2:ef:a6:0f:c5:
18:c4:1c:3c:00:9f:ec:ab:e3:13:97:5e:93:ef:27:
e6:21:a6:9d:0e:bb:9d:9c:01:4e:0b:60:c9:7c:10:
98:5b:6b:42:f8:0d:fe:17:dd:01:cf:35:ed:d4:98:
e6:3d:01:05:af:77:fb:fd:26:26:c4:4b:6f:d2:25:
e9:d2:0e:f5:30:0d:cf:ad:6e:f5:d3:05:79:6d:fb:
60:d9:f1:15:3f:07:ae:62:fa:b4:d0:e5:97:bb:78:
8e:fd:6e:23:88:37:88:76:44:bf:ae:af:cf:03:2d:
ea:cd:38:db:15:a6:2e:1e:d9:9b:fc:67:2e:3a:1c:
3c:36:e5:7f:aa:89:d0:5a:2d:dd:8b:4f:ca:b0:09:
d6:82:a7:a0:66:af:12:00:d1:55:96:67:70:42:c0:
38:64:94:37:34:bb:9f:4b:24:b2:41:b4:31:2d:7e:
6c:fa:24:33:6d:40:10:45:12:eb:71:94:f9:0a:ee:
58:84:a3:6e:55:5b:17:b9:46:5b:5f:62:39:31:f3:
6a:fe:17:37:6a:dc:db:94:88:f9:57:5f:49:63:6f:
1b:f4:1a:b4:de:30:c9:d2:05:b2:65:f6:bb:b1:23:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C1:F1:EF:12:6E:E6:EE:73:5F:6D:BE:B1:F7:6F:0F:E7:77:69:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/c4432ad6-e9e5-3553-a1da-8ebfcb41ad41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
X509v3 Authority Key Identifier:
keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
sbgp-ipAddrBlock: critical
IPv4:
204.186.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:ef:0c:44:e2:a6:16:78:bf:99:7a:ba:57:65:b4:e2:49:3a:
06:30:52:7b:86:13:92:5b:3b:07:f2:49:2d:a4:89:50:27:40:
bc:92:96:9f:5b:f6:0b:8c:21:d7:dc:1f:3a:db:c6:c4:38:3c:
80:a1:c2:d1:10:5d:e3:81:74:92:25:bf:5c:55:30:89:23:30:
61:02:56:29:e9:a3:71:c3:40:d6:d8:f5:ff:3a:65:bf:fa:1e:
4c:74:20:c1:66:88:f7:27:03:52:a2:64:0b:16:dd:b7:f9:7a:
c4:d2:88:19:1a:14:36:37:79:a8:8c:3c:8f:17:01:53:91:5b:
7b:9c:c9:04:ad:40:a2:49:b8:d2:3b:d4:2e:e8:bb:26:30:1d:
8a:6e:74:98:00:07:09:ee:18:b0:bd:e2:f4:77:ad:2f:84:82:
e9:ed:5f:2a:be:e9:85:bb:9d:6a:da:dc:2b:45:59:1b:f5:85:
e1:30:dd:af:41:9c:77:74:c6:dd:d6:0e:7b:d7:f0:f0:de:3e:
d5:51:f5:44:a4:5e:c7:3b:1a:e9:2c:aa:b4:bf:29:9f:a9:5f:
e2:5c:8d:51:d6:51:d1:d3:8d:be:4c:6c:5e:60:60:79:0c:ef:
48:47:4b:f3:5a:da:24:f3:cc:c4:8c:4b:69:3b:ab:53:fe:3e:
9c:af:64:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:23 2025 by rpki-client