Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa
File: 6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa (raw, json)
Hash identifier: 6DPePPhzsy1xssUMdhqevsJSYObAtcO3bj4Jq+4tkTQ=
Subject key identifier: DA:AA:64:A5:D8:A3:23:33:86:04:6F:9C:85:A4:D8:E5:A1:55:EA:B5
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848AAFB62C03CF8BE0E0B81AD80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 3356
IP address blocks: 204.104.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:62:c0:3c:f8:be:0e:0b:81:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=525a33e3-b454-4c8c-8e3e-6e529f767d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:75:30:48:36:a0:52:c5:1b:53:2e:ee:f0:
8f:a1:09:f7:18:14:e0:9d:3a:75:3a:af:50:5b:94:
d0:d1:65:5c:41:6f:4c:5f:88:9c:36:78:e6:51:1a:
51:e9:2c:dc:5f:3f:1d:83:fc:2c:90:bc:e2:7c:35:
01:f4:e8:ba:1d:38:e5:0a:a4:c3:ba:7a:74:03:fe:
f2:4b:f1:0b:e7:42:39:90:10:4a:2e:79:e0:91:55:
f2:7a:1b:42:28:69:65:8a:4c:6f:d5:3f:0a:93:3c:
96:df:21:76:fb:88:f2:64:0e:9d:e4:0d:d8:24:a8:
a6:35:f1:a6:d0:77:23:c3:ba:85:ee:00:97:39:3e:
88:59:a2:c2:35:e7:d6:b6:28:9b:fa:7b:15:e0:ec:
75:80:6f:89:ef:ae:f3:d1:ab:ca:1d:7d:b0:21:2d:
21:eb:29:7b:cc:fb:bb:70:9c:ce:82:d3:17:d9:f9:
7a:d2:09:15:e6:d6:cd:96:51:ad:2f:15:4a:6c:bf:
02:b6:28:63:1c:3e:84:d2:7a:0f:d5:39:49:88:5f:
0e:0d:fc:d3:bc:5d:fe:0f:6f:0c:a6:21:c6:66:39:
17:73:11:90:5b:8e:4e:ca:84:1d:35:b1:6d:72:7b:
c8:aa:03:93:e7:2f:23:d8:9f:52:0a:17:f7:d3:18:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AA:64:A5:D8:A3:23:33:86:04:6F:9C:85:A4:D8:E5:A1:55:EA:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0bde-43f6-3473-8d53-f2d3ac9bc38e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
204.104.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:20:75:f7:b6:81:3a:ec:b7:a0:ea:4a:17:64:dc:9b:8d:c8:
6f:a5:73:e9:be:e6:bf:7f:6b:dd:97:27:4b:4e:b6:9e:e1:0a:
3c:42:b4:ac:32:af:fd:94:7a:3f:5e:61:ab:de:96:fd:71:bf:
d2:02:98:0c:ff:83:2a:b9:f2:96:77:b3:36:e2:5d:ac:ee:a1:
49:ba:ac:62:53:c3:8a:56:8c:51:eb:76:64:7a:ae:cd:e2:96:
29:f7:d8:94:3b:55:57:7a:a7:a0:8f:0a:fc:14:a2:41:b6:38:
fb:75:c3:d6:e9:99:94:ba:10:45:fd:14:34:19:bf:cc:3d:45:
3f:72:87:2b:22:91:9b:26:98:20:a5:ea:47:73:ab:ba:ed:6d:
f6:e8:6f:50:11:ec:ad:4f:11:07:63:18:61:c1:fb:13:91:5a:
84:f8:b2:37:90:e3:88:37:fc:45:bd:c8:38:5c:89:5c:86:60:
c0:02:5b:cd:80:f3:b0:ed:7e:a3:6d:47:f4:26:71:2c:a7:16:
13:27:d4:9c:52:e8:08:09:b0:9f:31:2e:bd:ee:e7:df:e0:c9:
c4:e4:31:46:27:6c:18:f6:ec:9d:38:cd:9c:d2:d5:fe:45:44:
1e:cc:f2:4d:e8:b1:d8:39:68:d2:97:9b:e4:cb:08:f6:b6:fe:
88:fb:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:38 2025 by rpki-client