Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/334f57c5-ecd6-35e1-ab57-cc863f1e3631.roa
File: 334f57c5-ecd6-35e1-ab57-cc863f1e3631.roa (raw, json)
Hash identifier: rZwipovHd0RsrpqtIiy5U7VLiV3P8kjlbVqAxutA5V8=
Subject key identifier: 09:A9:7E:51:DE:3D:CB:1E:80:13:BF:3D:90:24:8F:94:23:52:7B:4A
Certificate issuer: /CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
Certificate serial: 010D0C9F432858494B6413855F23C9DD5954BE40
Authority key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/334f57c5-ecd6-35e1-ab57-cc863f1e3631.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 30574
IP address blocks: 204.8.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:13:85:5f:23:c9:dd:59:54:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=38963dd4-abb9-47fb-ac73-c0d46ada5059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d8:72:38:51:6d:24:75:2c:12:f7:42:df:58:
95:fc:8d:b4:cf:35:30:46:ee:89:83:84:19:c0:4e:
a2:cd:69:98:6e:f5:c2:e6:3f:20:c3:5d:06:80:75:
71:0c:12:67:cd:64:2c:c5:45:50:5f:0f:74:fb:88:
ab:d4:d5:c8:0d:03:f2:ef:51:c9:fa:a9:97:1b:ae:
11:98:8f:4d:7d:ee:6a:6c:81:26:18:53:c5:1f:6c:
db:98:2b:bf:fb:35:3b:e1:66:40:d4:98:9a:e0:72:
d3:fc:a3:a9:09:ad:b9:3a:8a:67:07:31:39:69:cc:
fd:17:78:1e:2d:e3:7f:9d:48:cd:ce:0c:5b:a9:1a:
a1:d5:84:4e:bd:4e:14:2b:d8:4b:11:df:d0:17:52:
32:b2:35:61:b1:68:49:e5:35:3f:42:3a:5d:da:9b:
03:49:7d:b8:73:8e:e3:01:fd:17:21:65:8f:6d:98:
a2:9e:6c:0e:38:d7:c2:6c:06:3a:3a:14:be:be:c9:
8d:be:78:ed:dc:8b:9c:51:83:26:e6:da:41:c3:1f:
0e:dc:f4:8b:ad:60:84:5d:35:ae:31:33:8e:03:d3:
08:08:3b:d8:c3:82:b3:65:fb:8d:43:82:cc:34:bb:
fc:c4:69:29:b2:53:a1:04:c8:e4:bf:4c:ee:af:f4:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A9:7E:51:DE:3D:CB:1E:80:13:BF:3D:90:24:8F:94:23:52:7B:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/334f57c5-ecd6-35e1-ab57-cc863f1e3631.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl
X509v3 Authority Key Identifier:
keyid:DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:ae:dc:22:61:c0:a7:d0:c6:00:1e:ee:87:5f:f4:81:d9:5f:
97:82:46:c0:b2:c7:c1:ab:1e:61:a4:5f:5c:5f:7f:fa:d9:97:
b9:5b:15:58:d4:18:5e:46:55:1d:da:b7:d8:eb:ae:10:cb:4c:
f6:5c:af:3c:cb:ee:30:3a:74:e8:56:45:13:67:25:e4:82:de:
03:1a:9c:cc:43:b2:6a:69:18:c2:19:9a:01:8a:46:33:68:ae:
ae:f5:de:e5:ac:68:e6:e3:95:06:5f:d7:84:4f:ae:13:5b:64:
c7:c2:34:01:7f:44:56:ac:45:df:63:df:4d:f3:1e:cb:ab:70:
41:e8:d8:89:59:ab:08:0f:73:d0:16:99:05:f0:ca:b9:59:be:
5c:b8:b7:58:d7:f2:41:ea:9e:22:16:c6:82:ab:0d:25:df:5d:
53:1e:c1:59:a3:9e:3a:4b:0d:a0:b7:06:a1:89:05:f0:97:ba:
df:87:1e:cc:88:5a:f9:e8:2f:64:c3:0d:49:f0:22:a1:94:cc:
90:1a:68:2a:fc:d7:27:8d:be:e3:53:db:56:ef:7f:45:37:1c:
65:9a:64:da:03:be:5b:2b:f9:f6:46:28:f7:46:56:01:47:fc:
a0:90:fb:c4:04:6e:66:12:60:68:c9:cf:4a:04:b6:72:4b:f3:
ac:36:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:48:46 2025 by rpki-client