Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa
File: f42044dc-4bba-3889-9d93-7be101a8b14b.roa (raw, json)
Hash identifier: krvT7TRsFGNdHzCrEqV3cfU9RafpPVoOFWO/ayz/bOU=
Subject key identifier: 16:4B:05:78:8A:E5:40:9D:CB:5A:BA:42:54:7E:2C:9D:9E:3E:24:C0
Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial: 010D0C9F4328584957F40F858F7E06AE38D09E80
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 400928
IP address blocks: 76.164.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:0f:85:8f:7e:06:ae:38:d0:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=8e56fc90-7aae-4755-ac81-ab4add4c9459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:a7:cc:fd:3b:ab:07:9e:c5:65:ac:49:a5:
f0:d2:5e:d3:1e:43:85:68:17:38:b3:95:e2:17:0a:
5e:11:47:04:ec:a5:73:dc:90:80:9e:1f:1a:54:d4:
a2:a4:2a:b1:29:ac:0f:c9:61:f5:c3:93:28:05:a2:
42:df:44:9e:a9:ad:ca:3f:c7:15:87:5f:a6:09:4e:
b9:88:22:55:4b:92:8c:4c:01:94:d8:d0:ca:f9:72:
a8:a9:f4:b9:6a:03:72:b5:65:27:c4:66:f0:5a:eb:
dd:d3:80:c8:17:da:88:a7:65:49:47:0b:3d:f9:8a:
68:48:ab:32:4e:ef:71:aa:be:d7:05:9f:79:53:8d:
f6:26:b0:6d:71:19:a7:f8:5f:47:c1:d5:0a:ef:c2:
49:27:7b:33:12:25:b8:a2:24:9d:2c:c9:bc:19:e2:
94:a0:93:c9:d6:55:be:52:71:bf:18:3c:cf:ab:d9:
70:51:48:96:c1:2c:e7:30:ee:c0:aa:83:48:93:27:
0c:d5:cf:36:d0:23:9b:79:47:56:87:64:62:b9:4a:
0e:f0:3f:33:e8:c5:82:28:c5:5e:e5:13:d2:89:5e:
12:73:48:a9:a8:bd:4f:2e:6f:88:15:86:6c:35:cc:
de:46:a6:46:34:0e:46:54:14:69:7c:b8:b5:01:81:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:05:78:8A:E5:40:9D:CB:5A:BA:42:54:7E:2C:9D:9E:3E:24:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
X509v3 Authority Key Identifier:
keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
sbgp-ipAddrBlock: critical
IPv4:
76.164.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:72:96:fd:40:1f:ed:d3:a2:d7:57:ab:34:9d:01:95:f2:cb:
38:96:8f:3f:43:2d:7b:49:a3:ea:f9:4f:b4:fc:b4:76:07:cb:
29:ae:08:63:28:f1:27:18:a4:c5:cb:c9:fd:8a:34:c8:cf:3e:
7c:19:1c:0c:4b:66:6a:03:e3:c9:9f:10:6e:fd:a9:03:a0:83:
5c:ff:67:63:62:9a:eb:2f:9e:c3:a8:24:f4:06:95:3d:d5:ff:
b2:4f:09:86:c0:c8:e2:fb:3f:6c:c0:f5:01:ff:d6:64:a4:0d:
1c:c3:ed:0e:4d:03:c0:f3:ed:74:61:d8:89:e6:89:f7:b6:8b:
a8:99:d2:2d:cf:be:dd:ba:1d:46:9a:8a:01:c5:a8:f4:c2:0b:
0b:5a:67:a3:5a:f0:12:e4:a7:a3:0c:31:92:cd:b9:68:d4:c1:
0f:27:81:e9:80:2c:53:81:5f:07:fa:58:ff:4e:e7:e8:d4:9a:
65:50:9c:5f:53:48:df:01:63:02:5c:66:ae:48:9d:15:46:2e:
5e:6a:d9:2d:05:18:81:bc:b6:4d:8a:61:40:d3:cc:46:92:fc:
bd:18:6e:96:ad:16:90:e9:28:30:ae:7d:f7:f3:53:e4:a9:05:
5d:78:2f:e6:f7:35:e5:7d:2b:a9:35:5d:5b:9e:f8:df:b9:13:
91:54:10:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:50 2025 by rpki-client