Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d741a37-bbe7-386f-a706-d1272b5e8e69.roa
File: 8d741a37-bbe7-386f-a706-d1272b5e8e69.roa (raw, json)
Hash identifier: emlyEFOIo6FOkCZr8fLxjYTG91ZdJ21+AwO7MCVk8KY=
Subject key identifier: D3:76:C9:D8:B1:79:0E:58:94:FC:D8:08:73:B3:F4:3F:99:BF:ED:94
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858491D71847ECDA9C3F7E37F1700
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d741a37-bbe7-386f-a706-d1272b5e8e69.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 20940
IP address blocks: 204.2.132.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:84:7e:cd:a9:c3:f7:e3:7f:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=63c146fc-87ec-4c02-b28f-11a1c73975c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:c8:fb:d3:b5:17:15:54:5f:41:b1:62:ad:
f9:a3:f7:e0:7c:c9:a4:54:ba:c3:52:f4:a5:e0:eb:
79:30:ff:ad:10:b7:ce:ad:97:07:e3:2d:ec:dc:73:
52:f5:87:0d:00:51:ad:3c:46:eb:2a:3d:ab:b9:b3:
99:e1:fb:42:0c:22:e1:e8:2e:1d:37:4e:15:3b:13:
fc:ad:d1:b6:eb:b0:d5:4d:ca:c3:1e:30:18:7d:50:
6e:d2:62:d8:42:40:8a:fc:b8:99:75:47:75:0b:24:
b4:6d:41:84:13:c2:58:51:1f:74:41:31:10:5b:c6:
f7:11:2e:14:0e:4c:7d:b9:ff:43:09:73:8b:30:31:
d9:93:ee:a2:05:cb:4d:cd:8a:8b:98:5e:ed:80:bd:
81:6c:ec:02:fc:ab:bf:81:5a:a1:73:63:86:38:e6:
eb:41:c8:e3:3c:a5:2e:60:64:85:d0:22:4c:42:95:
cd:04:d1:98:1f:6d:fc:34:01:51:e1:6b:b0:81:07:
12:1e:1d:28:ca:19:da:20:35:e3:17:77:44:a4:04:
5d:6d:0c:43:bd:4a:72:b5:6c:54:86:ef:b8:fe:b4:
9c:a9:3c:63:4d:ad:11:06:0a:bc:c1:40:db:cd:9d:
28:99:3b:c0:68:cf:53:c3:d5:26:80:22:a0:48:82:
c8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:76:C9:D8:B1:79:0E:58:94:FC:D8:08:73:B3:F4:3F:99:BF:ED:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d741a37-bbe7-386f-a706-d1272b5e8e69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.2.132.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:4f:37:8c:22:16:ad:e3:4a:66:81:8b:83:34:d7:f2:72:a5:
f8:72:c3:eb:a9:11:40:db:0c:d4:22:2e:ee:af:2a:73:cc:a5:
14:11:40:cf:a0:0c:5a:19:ea:aa:1f:cc:94:c9:fa:6e:d0:b4:
66:59:c0:8c:06:61:ce:c7:1c:56:5e:5f:13:b0:fe:76:c9:3b:
49:49:98:50:80:a0:4b:63:0b:7e:4d:95:94:39:8c:77:54:1f:
4a:d6:ca:38:d2:8c:bb:85:00:bc:fa:a1:ff:66:3d:21:23:22:
6b:32:1e:d5:11:5f:db:8f:96:95:7e:4a:b9:91:da:92:78:07:
d8:bd:54:77:17:9d:1c:76:18:ee:4f:b1:29:2e:3c:77:b2:c4:
bb:ef:eb:9d:20:87:e7:bd:5c:c8:16:dc:81:80:d8:b3:c5:0b:
8b:25:cb:2e:a8:60:dd:b4:42:d5:48:a7:2e:6f:98:e5:d8:3e:
96:59:1c:b8:70:d7:e1:a6:81:a8:f5:a0:66:fd:69:46:c8:cf:
50:84:e4:01:d5:50:14:29:f4:1a:82:d9:be:db:fc:cd:10:44:
b7:41:8c:ed:3a:39:eb:28:98:b3:62:0b:5d:a4:c8:94:f4:d2:
7d:fb:4f:bc:63:97:83:ef:d0:6c:7b:46:e8:e8:a6:95:a7:e1:
ee:f4:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:18:22 2025 by rpki-client