Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/a8c350c4-f79b-398d-b15e-aa58ed9800c7.roa
File: a8c350c4-f79b-398d-b15e-aa58ed9800c7.roa (raw, json)
Hash identifier: q+GBZh6quDmznkCcgFnyI8Hhb8LBzFslPgaVjKRfI6Y=
Subject key identifier: 94:8F:9D:6F:98:E4:1D:C3:2D:E6:A5:AE:8E:0D:E6:25:55:E2:23:86
Certificate issuer: /CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Certificate serial: 010D0C9F4328584957F4135895053DAE77918BE0
Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/a8c350c4-f79b-398d-b15e-aa58ed9800c7.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 21928
IP address blocks: 204.235.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:13:58:95:05:3d:ae:77:91:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=2fbc3e79-6c61-44db-9156-ea6cfaa51284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:d5:f7:62:24:34:44:9d:09:f5:5f:fa:3d:
d6:af:5d:e5:81:96:14:77:5c:9d:77:ee:74:33:e8:
a4:4e:d3:8b:6a:72:92:b9:28:5e:ed:d4:3a:f9:26:
53:d2:91:34:a9:f7:71:97:08:74:d7:2a:96:94:ba:
0f:72:4e:4e:d0:58:9c:e3:9c:22:54:04:0a:76:4a:
b1:90:d4:77:ef:df:2c:ec:95:eb:c4:6a:32:d2:86:
0a:2a:12:ae:ff:12:ec:07:c2:0e:08:24:6e:3f:77:
9f:d6:1c:a5:61:c8:1d:65:0c:33:89:1e:19:35:ed:
9e:07:78:39:d2:af:a6:f8:69:f9:ce:a4:c1:09:98:
b4:00:68:89:0c:3c:75:88:88:67:70:03:6e:82:3b:
52:91:1f:35:31:e2:a3:08:f1:48:06:db:85:8b:d2:
68:af:11:4b:85:0a:51:10:61:76:82:fd:55:73:46:
bf:57:ba:64:ed:b2:51:eb:77:b6:23:6d:3b:db:f2:
9f:a2:91:4d:b1:36:44:ca:47:f4:e6:b8:d1:32:23:
50:d3:aa:99:0e:22:96:c3:97:dd:3a:8b:26:df:24:
04:8a:87:58:c8:75:b9:de:e2:9a:3b:f6:11:80:3e:
9f:29:3f:b4:76:f6:5f:e0:e7:70:a7:cd:93:b1:e0:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8F:9D:6F:98:E4:1D:C3:2D:E6:A5:AE:8E:0D:E6:25:55:E2:23:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/a8c350c4-f79b-398d-b15e-aa58ed9800c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl
X509v3 Authority Key Identifier:
keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:96:1a:d0:68:7a:b0:51:f0:f9:36:18:30:51:26:72:b8:6f:
fa:76:3b:26:ba:6b:ec:64:f5:ad:45:a7:da:a5:5d:30:84:e0:
61:50:e5:ca:d9:e2:57:24:56:b0:cf:32:34:4b:e3:88:d9:98:
0e:9c:db:f1:1b:eb:bc:e9:c2:c0:43:74:bc:7b:5c:a9:f7:2d:
b8:f5:5d:41:23:25:7f:f1:6d:9a:a0:36:42:ae:cf:b3:81:ba:
b7:01:74:98:be:f5:59:eb:8d:16:02:25:32:2b:a0:db:65:c9:
05:c8:03:73:3b:89:26:27:f7:c1:28:5b:d0:f7:e3:e9:ef:74:
50:5e:81:e1:92:ea:27:e4:17:0a:62:5d:16:7c:75:6b:91:7f:
a2:67:4c:e4:20:d8:26:14:cb:1a:3d:ab:36:53:23:5b:19:ea:
8f:02:68:d2:94:de:f4:81:00:3d:37:53:2e:5f:64:62:31:d2:
d3:a7:7c:a8:85:d2:8d:cc:37:4d:44:0e:6a:77:64:63:6d:36:
7f:8c:d6:c1:a5:c7:09:c2:24:e0:05:41:31:1d:24:3c:ff:2c:
f1:f0:a2:e9:6e:0e:45:6b:68:3e:ff:b2:82:c3:5f:9f:38:48:
2a:e8:b6:db:7e:7e:11:d9:98:3f:50:cb:34:da:6f:fe:dc:3a:
cd:4c:f8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:29 2025 by rpki-client