Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa
File: c1bab32e-ba6f-30e4-bb04-585c662c039e.roa (raw, json)
Hash identifier: fNFZtxAX+F8IRY0ht0FFAT9NKz6syflqfxU7skLi/UA=
Subject key identifier: C6:95:E0:00:23:91:21:EA:99:FF:48:AB:9C:78:3F:C8:4A:19:7E:28
Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial: 010D0C9F43285849203C12D11FC241CF60E5D380
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 400238
IP address blocks: 204.8.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:12:d1:1f:c2:41:cf:60:e5:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=9c196ba6-af34-4fc4-91f3-9cdf963c6501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:68:b3:00:b2:6a:e9:91:9f:68:fd:ce:84:
2d:04:5f:58:61:db:7d:d0:79:a0:81:30:85:34:ab:
5d:d3:31:f5:7f:4b:39:f9:5f:fd:d4:1e:10:27:c7:
27:f1:5c:c9:8a:b1:78:65:d9:c6:c3:25:a4:40:e8:
2d:a2:c2:a2:e1:08:fe:0c:79:dc:44:87:71:d2:42:
38:38:c5:4e:4d:c3:49:74:ed:31:74:bd:63:42:d9:
01:95:b6:12:a5:8a:2a:76:4c:ab:51:a3:55:bc:4e:
b1:59:4c:3c:6c:34:fe:86:6d:da:6d:26:db:6e:8b:
6c:a7:d7:f5:23:56:61:0f:09:41:d0:d1:11:cf:88:
3f:c7:4c:4d:90:e2:1c:c1:c7:b9:f2:b1:ad:bd:f7:
45:fd:ff:23:64:ba:ae:8a:46:70:c5:a4:21:96:85:
c8:cb:35:fc:3b:93:d1:87:a7:7d:63:cb:fd:a2:f2:
d6:e0:47:08:f2:b8:a5:ce:50:b9:79:7c:c6:6b:5c:
bf:08:a3:d1:b5:cf:bb:2b:92:03:55:83:d3:93:76:
43:8c:b6:60:9c:3d:91:53:10:04:6f:95:42:d3:09:
a9:7e:b5:73:12:bc:a3:1c:c0:65:2a:60:33:b4:d7:
4c:92:e7:ea:e4:d0:23:77:6c:ea:53:8e:ce:2f:33:
be:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:95:E0:00:23:91:21:EA:99:FF:48:AB:9C:78:3F:C8:4A:19:7E:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
X509v3 Authority Key Identifier:
keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:40:a7:df:e8:96:b1:fc:9f:69:51:ab:df:63:39:ed:3f:11:
8b:75:36:e6:75:78:3a:70:dc:08:27:52:87:5b:53:07:58:80:
ca:3f:a9:2c:da:e3:53:d2:a8:d3:86:e0:48:a6:bd:f1:27:1e:
8f:ee:51:66:44:f4:36:59:66:dd:65:ea:2a:de:df:59:4d:d6:
76:fd:ca:15:f5:10:6b:fc:52:92:88:5a:7e:3c:60:c2:a3:28:
9b:86:9b:0f:7d:da:99:da:fb:5e:78:d3:34:f5:f0:ab:90:7d:
d7:e3:eb:f2:17:0d:b3:dc:ae:d6:40:17:a4:2f:4f:01:78:b1:
8d:06:d6:ad:f6:9f:9c:1c:c8:83:c6:d7:d0:7f:98:e1:09:da:
6c:9a:96:15:22:e1:37:43:df:69:79:b8:40:d6:0c:bb:ec:ad:
fe:c8:3d:f3:95:28:60:d1:c3:eb:e2:fd:20:26:d7:5c:51:69:
9b:96:3b:54:2e:25:cc:b2:4b:df:8b:1a:05:a9:26:1e:39:28:
b9:97:d4:10:0b:89:1e:49:76:b6:7c:21:db:78:3c:e0:36:8a:
f1:ae:6f:35:fb:e1:52:e9:9f:1f:32:0a:10:47:75:65:ca:0e:
fa:93:5a:5d:ad:cd:2b:58:2e:76:a9:aa:00:c4:52:a0:bf:c3:
39:be:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:19 2025 by rpki-client