Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/380e600e-9266-3634-92d6-a46d02d8bbaa.roa
File: 380e600e-9266-3634-92d6-a46d02d8bbaa.roa (raw, json)
Hash identifier: IVtSPca7NinNMNyPjONN+uKfQ5qYfRvVOU8k0pwJvmA=
Subject key identifier: 1E:57:5A:86:AE:83:1B:3E:92:46:29:6A:87:B6:DD:8B:5E:61:A5:DD
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E8A0C723F7697D0F74E80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/380e600e-9266-3634-92d6-a46d02d8bbaa.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 20197
IP address blocks: 204.84.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:8a:0c:72:3f:76:97:d0:f7:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=d0eaebba-7e6a-4276-b9fd-94680a6c8fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:8f:58:94:30:e6:dd:4e:3a:40:d6:92:ef:
2f:f6:bb:5c:c8:85:f4:87:5a:2b:ba:e6:49:ed:a3:
51:b4:ff:2e:c9:44:3e:6c:ea:24:81:14:d9:1c:f4:
c3:06:8e:3f:ba:22:c1:32:3c:f1:9a:f4:a3:25:26:
e8:ba:f3:fa:79:91:e4:f8:2c:4c:47:4e:97:4e:20:
fa:d7:8c:4e:13:0b:a1:4d:93:80:37:25:7b:fe:2c:
99:03:f2:f0:d2:a7:fc:6d:13:89:60:ae:c6:db:f0:
72:ee:14:5c:1f:e3:48:96:57:25:e3:34:2f:c0:1a:
a9:59:7a:f4:3f:aa:8a:9d:b0:48:08:9d:e0:02:49:
5a:2d:ff:04:6a:38:1a:22:82:54:ea:9d:38:2d:cf:
3f:78:6a:d4:29:c3:ea:70:e0:b1:a3:9a:2a:f4:c0:
fb:0f:12:52:c1:3e:e3:23:06:22:4d:7f:5a:96:d8:
d0:36:80:f4:6c:95:1d:cd:19:f7:ba:9f:e2:13:29:
1b:68:0b:e4:bb:4a:ce:67:3e:02:30:f2:6d:ae:00:
09:f3:23:cc:81:bd:37:58:c9:6e:9f:0b:eb:d5:ca:
db:42:72:d7:59:8a:ed:4e:a6:53:5e:87:26:79:6e:
03:88:ba:f4:a6:0b:84:22:bd:dd:40:ae:b3:ec:2a:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:5A:86:AE:83:1B:3E:92:46:29:6A:87:B6:DD:8B:5E:61:A5:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/380e600e-9266-3634-92d6-a46d02d8bbaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:97:80:6a:08:0f:56:04:dc:ff:e5:90:28:d5:16:ae:da:ff:
33:93:d8:4b:7b:50:5f:3c:5f:33:d8:8a:1b:f6:84:a4:8e:e2:
3b:3d:6e:a0:d9:89:d7:4c:4e:5e:b3:9b:3d:71:45:03:02:a4:
39:ee:7d:2d:5d:d7:6f:8e:0b:60:ad:e9:c1:51:3e:cb:8d:1a:
74:0b:c4:f0:f7:31:87:d7:e5:54:9d:10:bb:8d:51:b8:ab:f8:
0e:10:d1:e1:19:24:bc:d1:84:a3:02:41:ed:9b:1c:eb:b7:c9:
cd:ec:79:bf:97:8a:9e:41:19:1b:d2:0c:c8:69:78:a4:2d:5f:
dd:d0:f8:24:fb:97:32:50:c6:b1:1e:8b:89:99:6b:f9:84:a1:
32:99:c4:d9:0f:33:00:16:fa:ec:6d:54:30:3b:6b:cc:ac:7d:
f9:4b:7b:07:93:a3:29:5a:5a:d8:8e:80:4c:43:ee:8e:c6:ff:
96:a7:67:f2:9f:b2:67:00:9a:9c:99:13:76:c5:cd:30:ad:08:
ca:ee:55:7f:dd:10:a3:8e:fd:6a:80:e8:bb:0d:13:47:30:f8:
79:08:34:22:79:7c:2b:48:ed:99:8c:5c:54:17:7e:b2:b8:df:
3e:69:54:48:c0:3e:96:93:0d:60:ec:35:98:8b:7a:90:f7:9c:
c4:60:37:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:48 2025 by rpki-client