Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/1994235e-c7e7-3805-8a27-83af0eb87dbe.roa
File: 1994235e-c7e7-3805-8a27-83af0eb87dbe.roa (raw, json)
Hash identifier: y+Rh8v3HYTaLwKbd5c7io3QuNtvBzzIeOqTwQbcxwSg=
Subject key identifier: 23:07:90:20:DF:D0:C4:BD:49:A9:44:79:D7:41:1B:58:9F:0F:BD:4B
Certificate issuer: /CN=8def8532-8491-4ca2-9370-4768f22df42b
Certificate serial: 010D0C9F43285848D211416722E45DB6C9EF51C0
Authority key identifier: 78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/1994235e-c7e7-3805-8a27-83af0eb87dbe.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 36305
IP address blocks: 184.94.160.0/20 maxlen: 24
192.111.31.0/24 maxlen: 24
198.98.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:41:67:22:e4:5d:b6:c9:ef:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8def8532-8491-4ca2-9370-4768f22df42b
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=ddd90b7c-7f03-4504-a288-f5441ab27ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:e9:28:07:61:b8:b3:38:7e:d8:29:4e:bb:
7a:09:42:49:c8:d2:40:dd:84:06:f5:2e:f1:d4:02:
36:cb:28:2c:dd:7e:b0:0a:89:b4:c2:c7:7a:98:be:
3b:30:e0:91:44:2c:1b:ba:02:23:84:6e:c5:08:37:
62:f7:05:14:41:d5:39:6c:02:b0:f0:c9:9d:87:25:
b5:45:f8:fb:25:60:36:9e:6c:83:f4:02:af:bd:28:
8c:bc:fc:71:dd:fc:45:b1:80:7c:7c:3a:4e:f2:ab:
e5:52:06:92:71:ec:a7:a5:08:ed:4c:6d:44:d9:78:
cf:d4:7e:d5:63:5d:c3:d2:f5:f6:a2:57:ba:10:f9:
71:50:7f:43:0a:b1:aa:9a:30:ca:95:ed:8a:98:14:
cd:bf:b0:91:06:7f:92:63:92:b9:f7:4f:41:04:20:
10:32:6b:fe:c5:2c:a2:51:d3:b1:d9:9f:fd:1f:f4:
7d:e5:2f:dd:b5:b7:41:e9:a2:51:fd:6c:d9:84:64:
15:db:cf:b5:2b:5d:c4:bd:70:fb:99:54:75:6a:7e:
88:0a:b1:6a:19:68:b9:fa:ed:44:dc:f8:0e:bc:97:
bb:28:f7:17:32:f4:90:a9:5e:66:f5:25:56:ad:94:
28:af:37:4a:2d:86:cb:b2:d1:4d:77:a1:92:f7:1e:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:07:90:20:DF:D0:C4:BD:49:A9:44:79:D7:41:1B:58:9F:0F:BD:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/1994235e-c7e7-3805-8a27-83af0eb87dbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl
X509v3 Authority Key Identifier:
keyid:78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer
sbgp-ipAddrBlock: critical
IPv4:
184.94.160.0/20
192.111.31.0/24
198.98.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:aa:4f:8b:aa:19:50:7d:cd:e7:da:8c:8b:ec:40:de:69:18:
2d:f2:6e:d4:be:c6:a1:12:08:70:f3:21:fc:9e:b3:cf:91:a4:
f0:08:90:e0:c7:41:46:0a:53:f2:47:62:5b:ff:c4:45:b2:32:
30:e5:35:02:c4:2b:51:a1:20:b4:15:58:83:03:1d:d0:2b:dd:
13:47:98:aa:49:ef:70:42:f3:d2:f4:1d:58:2f:af:91:c2:80:
69:8c:91:96:0a:40:03:1a:2f:9f:4b:aa:85:15:23:7f:35:c5:
fa:3e:ee:59:0d:12:e2:84:1d:a9:b7:29:ec:d5:12:24:6b:60:
54:a2:a2:78:73:86:eb:30:3a:6b:d4:f5:ae:c8:f9:98:2e:da:
c8:6d:f6:6b:ec:35:9d:a7:2e:ca:a1:f6:b5:a1:5c:6f:17:eb:
ff:f3:59:97:37:b8:40:7a:23:d1:7f:cd:a3:54:ba:93:81:df:
88:58:7a:25:14:35:5e:6e:a4:e7:97:30:92:c3:c0:a4:2c:b4:
13:28:1b:fb:64:fa:81:4d:cd:b3:d7:79:78:95:d4:cd:f5:da:
13:94:a1:f6:a0:39:4e:01:db:be:79:3a:4b:5d:b2:55:79:ff:
ea:3e:ed:b2:05:62:25:72:c1:01:6d:75:15:6e:ec:ed:70:d4:
8f:15:72:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:49 2025 by rpki-client