Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa
File: 3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa (raw, json)
Hash identifier: Bf4d79BRvEu0s7tDesbEONNCFjvD6kV0ikhHbrN7b2M=
Subject key identifier: 30:15:42:E1:32:94:EC:8E:17:B9:CD:32:DD:EC:91:4E:15:67:5F:E9
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584919417D4E48BA02DAC57D7AC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 1225
IP address blocks: 128.241.192.0/21 maxlen: 21
204.2.140.0/22 maxlen: 24
2001:418:3ff::/64 maxlen: 64
2001:418:1439::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:7d:4e:48:ba:02:da:c5:7d:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=5df3850c-2d58-4de6-9a60-6354f66ed578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:eb:01:17:81:3b:35:90:1e:63:00:fb:2e:1a:
7f:0b:c5:fa:05:08:0c:79:3d:c5:b5:83:d7:4e:be:
3f:39:d8:9f:92:c8:ba:b8:b4:16:29:1d:34:62:7a:
92:71:d7:3a:81:4e:77:cf:c4:06:b4:ee:5c:2f:54:
fe:a0:ed:68:18:14:23:25:0d:c8:14:db:f8:95:a2:
14:90:33:52:1f:35:b7:11:72:c0:6a:1b:4b:9d:7a:
55:a4:d2:63:32:7d:ca:63:8e:9b:d3:16:9a:c4:e8:
6f:60:b7:6c:63:b1:1a:85:4f:1c:2b:3c:85:38:fa:
c0:80:b8:b5:35:2e:c7:0e:bc:4b:cd:5f:c6:41:2e:
cc:6c:90:59:74:1b:55:07:20:4f:25:10:6c:dd:86:
3b:46:d2:39:58:bd:47:ff:02:94:a7:e8:0d:58:01:
0d:31:e9:63:11:31:43:e6:ab:f4:04:17:80:bf:2a:
96:e2:e3:ef:c3:80:13:16:82:dc:7f:f2:d1:ed:9c:
09:5b:20:d3:7a:d0:45:ed:d7:fc:82:39:27:e3:1a:
c3:20:9b:f3:aa:82:13:61:d9:a2:db:97:dd:08:74:
cb:65:07:cc:33:57:ed:4b:36:38:f6:fc:10:79:5c:
91:58:a0:88:4b:ee:2e:7e:2c:d3:b3:be:38:a1:b4:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:15:42:E1:32:94:EC:8E:17:B9:CD:32:DD:EC:91:4E:15:67:5F:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.241.192.0/21
204.2.140.0/22
IPv6:
2001:418:3ff::/64
2001:418:1439::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:62:91:8f:8e:7e:ce:2b:a5:af:07:bd:23:e6:81:12:46:ff:
6c:c8:a1:63:84:58:84:5b:d4:92:7e:ab:62:5c:6b:53:ab:0f:
c4:0e:b9:06:43:76:f2:97:c6:f2:b4:51:b1:50:16:55:96:29:
f9:06:33:3f:2d:6c:b6:d1:5e:e5:22:3e:1f:07:d1:d2:0f:18:
41:f1:1e:8e:de:50:81:69:0b:96:71:8d:00:69:58:76:68:73:
52:7d:e9:1b:86:9c:7b:62:cf:6b:43:d6:00:17:43:3f:9f:ce:
6d:ec:df:1f:a3:c8:7f:a2:fa:da:e7:78:1b:eb:32:d1:98:9c:
f8:ac:34:40:63:00:ba:e6:9d:57:b6:cc:ae:ec:25:73:e5:96:
7f:c8:a5:1f:1c:3b:b3:bd:f4:17:ae:c2:b1:c0:e0:d9:16:bb:
20:ae:2c:56:26:89:33:07:d0:fe:87:8c:b2:67:42:72:fa:5c:
be:8b:40:da:f0:37:ab:d0:fc:26:73:ba:8f:f2:d3:51:e4:3a:
9e:56:de:07:5c:c1:36:a8:e6:9d:75:2c:ac:e9:d0:da:ad:fb:
17:3a:cc:55:1d:44:ba:83:d8:70:2c:9a:42:4d:94:ab:9b:7d:
ea:3a:ee:17:4b:b7:45:58:3c:85:78:d6:e0:e5:02:7c:fd:13:
11:f0:19:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:20:06 2025 by rpki-client