Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/76508970-4897-3746-91ce-47a0b5dcfd10.roa
File: 76508970-4897-3746-91ce-47a0b5dcfd10.roa (raw, json)
Hash identifier: VUFZnbk0CDC6UD++HazbIfznk0nzZo70QF97MS7ca8w=
Subject key identifier: 96:2A:FD:C8:C1:F6:CC:0A:8C:F6:F8:F6:C5:4C:E6:E0:99:A8:89:F7
Certificate issuer: /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial: 010D0C9F43285849151158F365FC449083B23E8C
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/76508970-4897-3746-91ce-47a0b5dcfd10.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 54302
IP address blocks: 204.29.100.0/22 maxlen: 24
204.29.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:58:f3:65:fc:44:90:83:b2:3e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=98186dc7-0e58-480d-bbbd-6be78452daf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:81:16:9a:56:e1:97:d5:dc:d6:32:a9:3b:
60:26:2f:59:26:11:3d:3b:ef:71:01:f7:1b:8b:45:
6c:26:45:e8:a0:7d:5e:3f:e7:f0:1e:a0:f7:15:7c:
a4:e9:cb:44:9a:6e:f8:92:a6:74:7c:fe:7f:79:58:
ea:51:e3:a2:ff:48:d2:f8:b0:fe:ff:86:d4:6e:19:
e0:e7:21:62:a8:6b:c1:dc:a1:1d:57:c2:76:40:97:
f1:3f:72:98:e9:38:db:1f:9c:23:b2:b8:76:a8:35:
ab:14:5e:60:ce:62:40:1b:c9:86:bb:23:a6:17:0b:
e3:dd:24:bf:b6:3e:ce:34:24:3b:f6:f1:32:ad:07:
2f:58:3b:ad:d0:fc:64:bd:95:c3:e2:60:1c:48:e7:
45:df:88:15:66:41:62:ab:57:e6:46:46:5e:05:8f:
67:f4:b5:8f:33:ee:70:d7:77:75:cd:a6:66:17:40:
18:dc:31:32:49:63:33:60:96:0a:33:71:6b:4e:ec:
c0:de:19:67:2c:c4:18:f9:29:b4:4d:6b:e9:49:6c:
a2:ae:2b:c9:75:c2:dc:37:12:28:8f:db:6e:3e:c4:
80:10:2f:30:d4:81:41:86:86:31:1c:28:32:2f:ed:
6b:f1:f7:b4:66:d3:5a:51:91:65:48:80:b7:eb:3f:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:FD:C8:C1:F6:CC:0A:8C:F6:F8:F6:C5:4C:E6:E0:99:A8:89:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/76508970-4897-3746-91ce-47a0b5dcfd10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
X509v3 Authority Key Identifier:
keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
sbgp-ipAddrBlock: critical
IPv4:
204.29.100.0-204.29.104.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:f7:cd:db:33:40:a8:fc:3e:f3:a0:8a:dc:f1:73:b7:3b:22:
7d:f8:a7:12:0b:f4:a2:55:23:95:72:99:00:cf:db:a3:48:2b:
30:7e:a5:94:77:4b:e4:bf:43:4f:17:56:0d:30:f4:82:43:03:
db:0b:ec:af:8b:53:6b:a5:64:08:8d:b4:44:4c:47:74:cc:84:
c4:5d:79:c7:29:d2:54:32:c3:25:56:5a:a9:28:08:69:a9:d6:
9e:d6:87:94:3e:bb:21:d3:58:37:a2:94:82:8a:20:e0:7f:f3:
b5:3d:b7:e0:68:31:3e:d5:39:77:5f:25:ee:43:a2:19:65:be:
9a:b6:50:23:9f:52:bd:1c:68:cf:a5:02:cc:0a:fc:e7:31:1a:
cc:22:cc:af:76:e6:14:ac:db:52:e4:32:27:d5:9b:a9:72:a8:
8f:e6:4c:66:4d:ae:66:bd:70:6b:e0:90:6e:f7:0d:0b:19:cf:
97:49:0e:61:6a:67:97:49:1b:34:00:87:9b:84:a6:bf:57:16:
9c:d2:7e:75:65:27:4b:40:e1:b4:9e:84:e2:01:e2:d0:d1:38:
80:91:5b:3b:88:c3:5d:99:02:ba:04:d5:62:3c:74:25:ec:fc:
bb:2a:9e:13:2a:2b:9b:c9:8f:06:eb:37:92:ca:b8:35:fc:b3:
d2:d9:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:04 2025 by rpki-client