Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa
File: 2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa (raw, json)
Hash identifier: 1a5N3Nulu9gpgnm7pNbS/3f1LVm1SZvcQBURO5CsObY=
Subject key identifier: 92:C4:85:4E:4A:CB:DB:F9:F8:BE:30:52:86:E0:7A:4B:5D:83:96:9F
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848B090B118025BD26EB5121F00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa
Signing time: Tue 28 Jan 2025 02:00:39 +0000
ROA not before: Tue 28 Jan 2025 02:00:39 +0000
ROA not after: Mon 28 Apr 2025 01:00:39 +0000
asID: 214213
IP address blocks: 204.27.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:90:b1:18:02:5b:d2:6e:b5:12:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jan 28 02:00:39 2025 GMT
Not After : Apr 28 01:00:39 2025 GMT
Subject: CN=c60db27e-8074-468a-863d-0842ffef0fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:79:99:67:06:14:07:a7:d0:0a:24:d2:f6:
24:b8:b1:1d:db:8a:00:5e:b7:94:b4:33:8a:99:ea:
e4:49:8b:1e:f2:cf:87:15:2a:3f:ef:fc:4d:af:9c:
0d:89:5b:38:a9:27:72:33:d5:db:a9:7d:92:0e:95:
f6:15:cd:d8:8c:f8:b9:1d:09:f3:22:7c:fd:5b:e9:
31:77:7b:46:ea:5f:d7:8c:00:b1:55:1e:55:3e:65:
7f:aa:3f:02:c3:6a:33:91:1e:d1:f2:c3:db:92:c3:
e3:d6:56:67:f5:d8:dc:e1:c1:84:a4:74:f2:17:93:
04:da:69:c7:a6:69:d4:18:c2:70:33:77:0f:42:fb:
fe:6e:85:59:95:71:15:47:d3:a7:55:73:c2:1c:61:
2d:71:0d:1c:42:66:9f:28:33:b6:fb:e4:a8:45:39:
fd:24:99:06:83:a8:c6:63:06:f9:66:cd:f3:05:bf:
96:dd:2a:e6:ff:f2:d8:86:46:25:28:c7:6a:57:85:
24:b7:9c:da:60:66:fb:ca:fc:20:24:a0:7b:e3:b9:
3b:33:ca:0b:ee:c1:19:b4:99:ad:40:6e:c1:57:da:
ef:8b:ef:48:56:79:d0:86:4b:93:0f:15:72:e0:a2:
9c:55:ee:b2:b8:42:0f:eb:0c:8b:36:28:bc:cd:a1:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C4:85:4E:4A:CB:DB:F9:F8:BE:30:52:86:E0:7A:4B:5D:83:96:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.27.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:fe:2f:63:69:79:53:5c:94:97:c0:45:bf:c6:50:c2:e5:cc:
0c:da:9a:16:2a:96:ea:8e:86:f0:89:8b:10:5c:f0:34:0f:32:
4d:f0:83:97:d4:f0:67:74:28:2e:5a:5f:bd:4e:8c:c4:7b:8a:
aa:3a:d2:40:53:55:c9:5a:f7:23:3a:03:d6:83:a2:39:9d:bf:
7d:ba:84:14:85:d7:69:f0:47:07:f7:77:27:04:1a:6b:31:3a:
2b:82:36:fb:a6:18:be:70:75:a7:85:b8:60:3b:43:34:5a:b5:
4b:40:af:e2:7c:c5:0e:f2:bb:31:e3:d3:01:b7:5f:aa:50:39:
e5:88:07:ec:a2:4e:af:9e:37:b8:98:57:4d:07:f8:40:d3:7d:
80:cb:a4:c9:6b:3d:a7:b4:8a:0d:3f:9e:f6:24:62:08:5b:59:
00:3f:5b:30:c8:80:11:44:b0:dc:33:f1:4c:8c:12:98:67:b5:
f9:11:a5:01:d3:53:e4:23:db:bf:5d:8b:26:26:c8:16:38:ed:
50:14:c8:83:1f:ea:87:b6:89:20:22:a1:f5:9c:4a:b5:a0:d7:
af:6c:f2:48:16:55:6f:2d:16:be:22:7d:8b:da:72:3f:b0:fc:
24:66:95:44:1f:0f:3c:ea:b1:71:0a:8e:7f:79:44:93:20:10:
28:2a:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:20:02 2025 by rpki-client