Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d5179c22-83b7-30c7-9f47-3224cd334f66.roa
File: d5179c22-83b7-30c7-9f47-3224cd334f66.roa (raw, json)
Hash identifier: GwDrHiXh70HAtc0tubyOgBe3mqWqY8+aZCTPU7FtnpM=
Subject key identifier: A1:E3:59:2C:5B:F4:2B:F5:AA:0B:03:C4:5D:33:DD:1E:01:BB:15:60
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837D40E307B3A9C8BA74C653400
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d5179c22-83b7-30c7-9f47-3224cd334f66.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Mon 06 Feb 2023 05:00:00 +0000
asID: 7861
IP address blocks: 204.191.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:d4:0e:30:7b:3a:9c:8b:a7:4c:65:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 6 05:00:00 2023 GMT
Subject: CN=4acb1bca-fcd4-464f-8cc4-56157e58763b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:f3:f4:91:1c:57:6d:ca:fd:c3:2b:9a:43:
87:a1:66:d3:6b:30:5f:d3:c3:79:be:7f:16:b4:07:
5a:bb:98:7b:91:b3:e6:72:d8:07:16:bd:7b:b2:ee:
7e:a7:9e:ff:30:ed:46:0c:4c:81:74:e0:91:73:77:
03:c7:20:7e:78:4e:7a:d9:19:f7:4c:c4:30:e7:0f:
0e:53:87:8f:89:8b:a8:c3:9e:68:e8:c1:d1:37:9d:
0e:37:c7:e2:72:83:a8:d3:85:d0:99:6a:9e:f4:df:
2e:68:65:36:1e:be:0d:3f:a4:68:1b:17:e0:2d:2e:
61:8d:d8:60:14:b2:d5:ae:77:c0:ed:33:c4:9e:61:
34:a0:b7:4c:84:89:b7:55:ac:70:15:b3:83:f1:ef:
ef:0b:49:a3:13:cc:47:2e:06:3e:3e:cc:e5:d6:2d:
c8:3f:8b:55:c6:55:af:37:ba:2d:c2:9b:7b:8e:c3:
23:98:1e:92:66:c4:d1:42:7a:c5:db:62:45:c6:ad:
7e:3c:74:1e:72:43:26:9c:74:87:40:52:a0:53:3f:
f9:c0:a8:6d:1c:55:cd:bf:c3:4e:81:3a:7f:98:43:
0e:3c:08:39:7b:82:11:a1:85:11:f9:18:f3:8d:82:
c8:fa:df:a2:79:b3:e5:86:93:39:a6:eb:b3:16:48:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E3:59:2C:5B:F4:2B:F5:AA:0B:03:C4:5D:33:DD:1E:01:BB:15:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d5179c22-83b7-30c7-9f47-3224cd334f66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
204.191.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:70:4a:b2:74:4f:2d:a8:22:48:52:6c:32:e0:02:a0:e1:76:
ae:02:a1:fb:0e:af:16:4f:50:a8:9d:03:2d:ef:ac:80:17:0a:
1c:ae:34:52:cd:1b:31:c0:31:14:ac:e1:f5:c2:0a:8d:fc:a3:
28:fe:51:66:e0:7f:02:3c:0e:35:f9:db:b8:0a:65:d0:65:0a:
33:e2:90:a3:15:1c:9e:3b:8a:3a:56:b7:f3:df:46:56:f8:37:
18:b7:bf:19:2e:10:f2:58:2f:df:37:45:fa:ad:51:cb:de:45:
3b:75:5d:3a:d1:9d:b6:08:37:a5:cd:8f:bf:95:e1:cc:3f:da:
45:21:ec:7e:60:0e:95:89:d5:ea:a0:3f:a2:8f:d9:ad:a2:ed:
e4:e9:98:48:ce:f3:47:68:eb:ef:ec:eb:ea:14:fe:b1:8b:35:
7f:03:09:e4:79:72:10:62:9d:7a:c3:af:54:ef:cd:ce:24:cf:
41:b8:90:63:14:78:3c:7b:4a:2e:d4:8e:ad:f3:f7:da:c9:1b:
15:65:bd:35:25:95:04:54:27:a9:58:05:44:77:00:37:c2:2f:
7f:a9:fd:96:ed:18:59:97:14:d0:b0:d9:4c:b8:d2:de:9f:46:
21:87:7d:f4:f0:e7:6a:46:29:ae:25:f7:c2:71:1a:7b:ab:d2:
b0:70:88:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:12 2025 by rpki-client