Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/8c331a9e-96af-36b7-9340-fff260336dd6.roa
File: 8c331a9e-96af-36b7-9340-fff260336dd6.roa (raw, json)
Hash identifier: uwZY3Zmkvzvbsb6f3wfp+DtIiEkrmodmn5XpuP6jyr8=
Subject key identifier: BD:52:3D:9B:D6:B0:B8:7A:50:B4:3F:FA:8F:C3:97:8C:CF:F3:40:0D
Certificate issuer: /CN=bc4d5614-d1d4-42eb-a171-b3d234aef7a3
Certificate serial: 010D0C9F432858493ED3D3D719E01526EA908480
Authority key identifier: 64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/8c331a9e-96af-36b7-9340-fff260336dd6.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 35891
IP address blocks: 192.83.205.0/24 maxlen: 24
199.254.124.0/22 maxlen: 24
208.93.248.0/21 maxlen: 24
216.211.240.0/20 maxlen: 24
2606:bf00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d3:d7:19:e0:15:26:ea:90:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4d5614-d1d4-42eb-a171-b3d234aef7a3
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=9b21b699-175d-4214-8343-6151f1ee4992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:94:6a:c7:ae:49:d9:ce:27:e1:5e:d9:19:
a0:88:d1:5d:a9:01:bb:2c:a3:55:52:46:65:64:2d:
c6:bb:8f:74:bd:59:cc:15:5f:fa:06:8b:eb:7e:d1:
09:d3:90:66:06:be:2b:4a:1b:f0:e5:81:26:db:ac:
aa:6b:35:f8:20:73:68:d8:da:bb:ff:51:76:63:62:
2a:59:57:e8:be:9f:18:88:50:56:92:b3:0a:31:79:
3f:4f:cc:dd:c0:2b:15:20:49:9c:86:e4:ee:48:36:
73:85:96:20:b2:e7:52:9f:ac:41:af:24:13:40:18:
a9:42:47:5b:08:0b:21:d0:81:c6:15:cc:79:a6:12:
f0:84:99:21:f2:78:2d:d8:76:d4:43:54:49:37:f8:
20:04:b1:e2:0c:77:24:b1:f1:e9:ff:26:b3:d2:96:
65:08:bb:65:ef:20:db:a0:e5:6d:ba:70:1d:a6:49:
d9:9d:32:1b:1f:d8:6a:cc:bf:77:3c:cf:89:d6:e6:
2e:2b:fc:44:3a:26:31:7f:9d:9c:ef:f1:e0:18:20:
4c:e6:81:45:5b:e3:d9:ea:90:0f:1b:88:42:68:68:
7d:37:3d:95:ef:93:49:7b:e7:aa:dc:c9:ec:9b:de:
29:c3:c4:a7:8f:49:8d:5c:c9:70:7d:67:ff:08:6c:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:52:3D:9B:D6:B0:B8:7A:50:B4:3F:FA:8F:C3:97:8C:CF:F3:40:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/8c331a9e-96af-36b7-9340-fff260336dd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.crl
X509v3 Authority Key Identifier:
keyid:64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.83.205.0/24
199.254.124.0/22
208.93.248.0/21
216.211.240.0/20
IPv6:
2606:bf00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:7c:73:2c:b6:83:13:da:2c:99:80:f9:c8:c1:a7:09:f1:bf:
ef:7f:ac:a2:53:22:15:7f:5e:9f:71:df:cc:01:4c:8b:74:f2:
3c:79:9d:9e:12:06:78:d9:5c:a7:4d:43:61:e4:33:ff:1b:99:
1a:88:fe:04:81:ca:c5:02:94:87:d6:2a:92:d0:9b:88:3f:64:
51:b5:dd:cc:a0:d1:06:c6:da:35:2d:00:88:40:67:6b:33:6c:
fc:a8:48:f7:40:44:26:13:6b:0b:d6:c8:6f:f8:2a:e7:b5:d4:
e7:8f:28:5c:9f:34:12:0c:29:8f:7c:4a:a3:35:b1:23:8c:21:
10:03:6e:ee:3d:2c:63:92:70:bf:23:96:9a:93:a1:f8:ef:07:
42:eb:db:f1:4b:63:4f:e8:77:dc:0c:73:b1:f7:d5:4b:a6:ab:
9d:19:81:5f:d7:a5:9c:3a:c8:d1:1a:95:ab:f7:a4:99:63:ae:
93:b9:f8:f9:7e:dc:a8:51:61:8d:e5:58:56:e3:bb:0e:92:d8:
59:db:74:e0:8c:7d:88:ad:b5:8c:da:2d:9f:7b:f2:16:c5:85:
e4:32:d9:0f:f7:91:dd:95:16:35:ea:e6:97:89:a0:f8:9a:5d:
a9:35:50:bd:6e:de:1f:0c:27:a5:fa:80:f6:62:72:dc:0a:08:
dd:d9:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:43 2025 by rpki-client