Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/3311b045-820d-3d18-8dff-c3037c633202.roa
File: 3311b045-820d-3d18-8dff-c3037c633202.roa (raw, json)
Hash identifier: QJLcdKxpNTwdIad6ePgEgnSiQbk+rHzKtFbKKdTJE6M=
Subject key identifier: 2C:9D:41:B4:D6:FA:5B:84:FD:DC:31:9F:10:7F:4B:2C:C6:ED:C2:53
Certificate issuer: /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial: 010D0C9F43285848A1361916F2CC80652A7D0D80
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/3311b045-820d-3d18-8dff-c3037c633202.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 393981
IP address blocks: 204.239.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:19:16:f2:cc:80:65:2a:7d:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=5d9b3933-fc86-49c9-bf45-6ded0e14845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:24:00:b2:db:8d:01:ef:e7:4d:76:71:7b:28:
54:4a:7c:be:41:af:cb:d8:a7:9c:54:c5:24:9b:fe:
0a:00:5f:d1:5e:13:30:de:ea:2a:1a:d9:6c:c9:5c:
3e:35:22:4a:ea:d1:60:4e:68:37:f7:3d:41:9b:55:
b5:c7:a1:33:c5:10:db:7d:33:be:b3:2e:be:6a:16:
2d:1a:3c:93:d2:2f:69:60:ad:17:67:b2:9e:bc:27:
97:25:62:a1:d0:e4:0b:93:a1:42:a6:c4:c5:0d:c5:
c6:19:e6:74:83:22:bb:9c:83:15:ad:ac:5a:c9:60:
53:a9:72:17:37:4d:b5:03:71:9b:15:e8:b9:aa:ef:
1a:d5:c5:ed:93:4d:5c:79:8d:f8:94:44:e8:51:da:
58:78:1b:70:7f:37:11:b2:a2:e0:b3:ee:bf:60:50:
52:0e:08:bb:74:a5:94:ef:ec:d8:af:5f:13:d7:9c:
93:a8:d9:b4:fb:c1:87:a6:67:c5:b2:b4:6e:2e:04:
13:38:99:f3:78:13:4f:4f:8b:c4:d1:d0:05:57:68:
e7:44:36:b2:7a:ea:38:de:ac:1f:0a:a9:c7:66:e3:
ee:d3:f7:dc:2f:a5:15:70:9c:36:ba:89:85:bb:a3:
d8:12:f0:45:dc:e3:2d:c2:c9:d1:a9:b9:77:d7:bc:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:41:B4:D6:FA:5B:84:FD:DC:31:9F:10:7F:4B:2C:C6:ED:C2:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/3311b045-820d-3d18-8dff-c3037c633202.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl
X509v3 Authority Key Identifier:
keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
sbgp-ipAddrBlock: critical
IPv4:
204.239.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:b8:c7:28:6a:1b:94:dd:b7:9d:ce:92:f0:e5:e7:f1:2d:85:
e5:3c:1c:0b:d7:f0:68:7f:f7:4a:8a:ae:1c:e8:9b:79:9b:49:
1a:e3:a9:47:2f:66:44:bd:0d:98:83:91:ec:2f:35:4a:e7:c4:
e7:a5:95:93:91:48:07:ae:96:7c:e4:e7:a8:51:21:74:58:86:
09:8f:37:71:ee:ca:54:71:0f:f7:50:5a:99:2c:91:64:c2:36:
22:ee:57:25:ce:c6:55:9f:74:3d:ae:cd:f4:51:28:3b:6a:12:
55:02:85:2d:65:3a:f7:da:35:c3:9a:88:e4:48:64:43:28:a9:
84:dc:e6:45:b9:e4:d5:ba:c1:b5:1d:3f:8c:e4:db:7c:44:dc:
83:74:b5:f3:a4:17:19:01:d5:41:9e:57:36:4b:6a:b9:fc:27:
c4:8c:38:99:91:b8:a2:80:65:ef:68:d2:9a:27:70:e2:28:bc:
a2:d5:68:45:0d:cf:0d:5d:e0:61:b2:6b:87:87:a8:8f:c9:65:
37:70:e1:31:74:11:4f:50:07:c9:70:80:ba:98:94:e6:8b:fa:
3b:84:2b:9b:56:bc:84:b7:8d:cc:36:1e:85:e0:c6:13:b7:c2:
50:02:df:85:37:26:80:8e:2a:7c:a3:c4:c4:39:95:53:1f:30:
ae:bf:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:18 2025 by rpki-client