Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa
File: a3cdaf22-fa27-38fe-955b-f9f075407d40.roa (raw, json)
Hash identifier: ZxvieyzmBh35vtR/iInd3Ql0i9o5UbXekA+J3aWXJrw=
Subject key identifier: 76:B8:89:0C:17:9F:C2:BC:25:62:32:B3:B5:23:0C:EE:21:81:B1:67
Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
Certificate serial: 010D0C9F43285848AF2B7C426B087493BE23A0C0
Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 270169
IP address blocks: 204.199.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7c:42:6b:08:74:93:be:23:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=de3c8449-c50b-4af7-a5f1-0de3e7283a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:02:de:82:c6:f5:f0:ed:63:86:a0:03:b3:
85:70:10:d4:ac:c9:84:a3:87:a4:7f:4a:19:e0:a0:
7b:b4:f8:f1:d4:56:e0:87:4d:e2:6a:9f:21:7a:52:
c5:5c:d5:df:3c:b5:70:0a:95:0d:46:d7:f1:4b:2a:
90:05:fa:88:53:c8:62:ac:e0:3c:f8:ef:09:88:c2:
f7:e3:92:15:36:da:b0:5d:05:97:55:7c:7a:87:c3:
c7:09:f4:27:97:e5:c5:d6:6f:2a:53:51:b2:0f:5b:
ec:1d:96:1c:73:62:ee:6f:c7:e3:f6:0e:23:6b:7a:
61:64:de:cd:3c:d3:1d:de:d5:9c:e9:92:0c:e5:ef:
6e:45:79:96:27:4a:0b:75:bc:33:4c:2e:bc:ef:4d:
07:f7:81:f2:a8:1a:58:5b:09:d9:e7:b8:ef:c9:18:
3a:26:da:4e:14:7c:89:0d:cc:bd:6e:f9:f3:5b:9f:
bd:48:0a:08:92:58:9b:4b:5c:4f:82:d3:58:be:6f:
fc:7e:fc:9f:21:af:de:35:44:39:51:7e:6f:ab:0b:
30:e5:44:28:e6:1d:f8:1c:9a:0b:71:ec:0d:4e:f9:
ab:6c:f9:00:5c:4a:ee:ae:4d:88:94:33:0b:b9:5f:
c6:96:ca:aa:a3:97:1d:ce:91:d3:d5:9f:c8:93:ef:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B8:89:0C:17:9F:C2:BC:25:62:32:B3:B5:23:0C:EE:21:81:B1:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl
X509v3 Authority Key Identifier:
keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.199.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:b6:a5:2a:59:aa:20:a0:93:3b:85:5b:80:27:db:56:fa:5d:
e5:a9:27:e5:86:f0:29:bd:0c:f9:15:79:0f:94:11:77:95:a0:
58:e6:7a:e7:93:e8:ea:d3:9b:b6:0d:3a:71:b3:09:ca:da:a0:
04:f1:2d:a5:51:4b:0f:1a:a1:f4:75:da:a0:3f:19:0b:2f:64:
19:93:f6:b8:73:f1:fc:de:61:de:5e:01:8a:7b:56:dd:2f:9c:
d0:cb:81:82:5a:16:3c:20:1b:cd:e8:fe:c9:e3:e9:e9:5d:15:
90:bb:d9:12:9b:53:ef:e7:db:1b:dc:75:de:d8:4d:d1:af:3d:
a4:f8:77:95:b6:80:5d:71:e0:6b:4b:dc:a0:17:8f:a1:18:42:
42:aa:3b:d7:c8:f5:d8:7e:02:51:85:a7:85:87:36:ea:6f:31:
a1:59:eb:3d:49:e2:60:7b:88:5a:7a:2f:28:e8:71:1d:03:f7:
16:1b:68:be:9c:f1:91:05:49:b8:e7:e4:c1:ed:91:39:cd:12:
e2:cb:70:67:c4:97:c5:7d:74:ab:e6:36:80:64:55:cd:a3:e0:
c7:3f:62:79:22:a5:c7:93:02:07:56:eb:e7:20:49:9c:53:f1:
79:16:78:cb:36:ae:fb:88:a5:70:ce:81:a5:21:44:58:f4:80:
2e:36:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:50 2025 by rpki-client