Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d44a1ec5-0dd7-3097-a27f-fa8c15e4417a.roa
File: d44a1ec5-0dd7-3097-a27f-fa8c15e4417a.roa (raw, json)
Hash identifier: TBA/rvkF06aSVTmosMT30F2XzgTPfjdmT0WlFuNCUCk=
Subject key identifier: 41:D9:75:7B:53:BB:1D:BD:05:B6:11:75:9B:93:18:1B:4C:73:0A:11
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E0B5A8C4A2BD0F295632C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d44a1ec5-0dd7-3097-a27f-fa8c15e4417a.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 26914
IP address blocks: 204.8.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:b5:a8:c4:a2:bd:0f:29:56:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=c4eb64f3-97dc-4c24-a1a5-7699f03da57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:b4:24:67:ea:7a:f4:51:6c:6b:a8:74:33:
66:9a:a1:a3:19:72:f1:40:c4:02:c2:51:e3:b2:51:
9e:a1:07:e8:9c:a5:ca:79:4f:23:84:9f:2f:f2:06:
be:27:07:88:91:4b:de:de:04:32:07:eb:2e:ce:c9:
79:b4:6b:4e:d8:f0:7a:5b:0c:a5:71:65:d4:1f:ed:
79:fd:89:1c:f5:9f:b9:86:97:64:b8:73:a1:88:70:
de:3d:7e:35:a3:e0:9d:f6:91:1d:d3:63:63:56:f0:
60:8b:61:c3:57:43:05:34:ff:c9:a4:7a:a6:03:8a:
54:de:2b:71:ce:7a:3c:ba:aa:6b:7e:7e:84:a6:9c:
79:cf:0d:52:c3:8f:67:f6:4a:92:f2:25:ac:62:22:
83:57:83:16:36:5d:98:20:8a:44:47:cf:e3:31:70:
e2:a1:d4:c2:fa:4e:e0:63:0a:ce:ad:2d:05:d1:d0:
ea:f1:6c:7f:58:3b:23:92:0c:d6:3a:4e:32:3c:13:
3e:fb:e0:9c:a4:83:f8:d2:4f:76:5b:e9:29:7e:ef:
f1:13:5e:53:b9:46:38:e2:5b:1a:7f:af:34:42:d4:
3e:4a:4e:9f:56:4b:b0:15:5d:b2:e2:cb:b8:72:85:
de:02:70:ec:2e:4b:e4:78:2d:a7:c1:f7:d3:37:ef:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D9:75:7B:53:BB:1D:BD:05:B6:11:75:9B:93:18:1B:4C:73:0A:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d44a1ec5-0dd7-3097-a27f-fa8c15e4417a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:c7:2e:75:fa:29:de:f4:89:b7:78:12:11:86:08:ad:50:af:
a6:8d:cb:92:75:22:4f:2a:c2:07:99:43:33:a3:47:92:72:32:
98:11:96:24:a2:11:8f:83:f3:d5:9b:12:e2:69:80:30:59:6c:
52:c5:01:07:31:b2:5c:c7:4c:e2:4a:2b:8a:b0:3d:f8:4a:f2:
13:3d:fb:a5:e8:ec:1a:f1:1d:cc:34:a3:07:60:26:07:fc:17:
13:4c:44:a0:b3:1e:46:72:f9:80:fb:77:cb:68:c4:84:3b:6a:
b8:4e:b3:c0:80:8c:72:4c:4b:2d:6b:b5:d9:1c:e2:1a:09:9d:
12:4c:e9:45:61:e3:d6:05:50:60:6b:63:5d:b7:fa:98:48:7c:
34:61:6a:0b:20:5a:e2:dd:00:e0:fe:43:c0:96:db:64:ca:36:
e6:65:f5:b2:22:b4:a2:20:fd:1a:3f:38:db:64:30:15:34:33:
6f:a6:b2:ff:3e:cf:03:18:8f:51:79:24:04:d2:88:0f:18:ba:
22:f4:92:81:8c:be:de:ca:19:f2:80:a3:ce:ba:e7:b9:7f:0e:
10:72:dc:68:2e:56:eb:10:aa:f9:cc:56:0a:da:70:f6:2c:47:
ec:50:74:51:ba:19:a8:4f:f0:4e:af:33:34:45:02:bf:93:2f:
4e:89:2e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:19 2025 by rpki-client