Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa
File: a3b93d87-5667-328e-a14c-5284dd2687a0.roa (raw, json)
Hash identifier: CiPKjX5yJu9uYHl5IX637qYuD7+yb++YxDUZbBygnvI=
Subject key identifier: 3E:77:B9:04:33:8A:DE:3C:EF:41:AE:8F:97:B5:49:98:55:2B:4B:AE
Certificate issuer: /CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177
Certificate serial: 010D0C9F43285848B8F0CC3EFC54CAA74997CE80
Authority key identifier: EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 21922
IP address blocks: 204.197.128.0/20 maxlen: 24
216.37.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:cc:3e:fc:54:ca:a7:49:97:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=76864021-8d70-47c8-a124-de3641d13d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:d6:41:f2:59:b2:c0:21:92:58:d3:23:81:
ce:29:a2:39:ee:80:12:7f:38:01:a7:9c:8e:1f:af:
2f:ed:59:b6:7d:20:03:bf:ed:6d:13:2c:e8:f1:9b:
aa:37:02:23:82:7f:0c:0b:6c:b6:ce:43:6c:c9:1e:
ee:06:21:fb:45:0c:3c:bd:58:d5:03:f9:f7:d4:eb:
81:8a:34:c1:63:40:38:9a:39:cc:40:84:d5:ae:33:
22:ae:9b:a2:83:4b:45:2c:18:de:b7:2c:d9:70:a8:
7c:ef:14:f9:c8:98:e0:a2:8e:34:77:14:29:e4:e3:
e3:97:1d:2a:2f:44:5a:04:50:d5:b6:6c:b8:07:fb:
14:ff:43:00:c7:5f:fb:4e:51:21:2b:8c:de:7f:fc:
a0:27:6b:08:44:a2:9e:14:51:55:f7:83:d4:2f:4d:
a2:fe:d1:93:a9:92:d6:d0:7a:0a:cf:27:db:d6:14:
2a:83:2e:a7:ee:7a:ed:19:3f:3e:a8:91:66:a3:e5:
21:63:83:dc:cd:ce:7b:1c:dc:68:92:3f:83:0f:91:
65:94:0f:44:2e:70:99:c1:49:8f:02:5b:f5:88:b7:
82:b9:b7:f6:e7:96:e0:95:1a:fd:44:66:bf:98:13:
99:c2:a8:80:02:c1:7c:87:6d:8e:a3:47:ad:37:30:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:77:B9:04:33:8A:DE:3C:EF:41:AE:8F:97:B5:49:98:55:2B:4B:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl
X509v3 Authority Key Identifier:
keyid:EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer
sbgp-ipAddrBlock: critical
IPv4:
204.197.128.0/20
216.37.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:f4:dd:18:02:6e:b5:a0:2b:2d:38:2b:09:84:ff:c3:4e:de:
08:6f:ac:f7:ea:a7:63:3e:84:36:f3:55:f6:32:4b:ab:17:49:
c8:f7:44:46:ea:06:22:a9:31:e9:0d:a6:fd:d7:4c:99:df:b8:
0f:38:4e:8d:aa:68:12:22:9e:df:bd:b3:6a:4e:6d:23:c8:d8:
89:13:84:30:ec:fa:1d:e2:3d:53:24:d7:dc:2c:76:6c:0e:7b:
3c:3d:8d:d3:0d:6f:87:68:84:c6:a7:c0:98:2d:b1:11:1c:2a:
f0:d2:bd:01:21:0a:1c:e0:4a:81:5e:d2:b6:98:85:40:36:bc:
a4:83:c5:4e:cc:d1:73:a0:fa:50:9d:db:76:1c:39:07:52:e9:
b2:db:fd:c7:69:87:bf:d0:14:5b:47:98:2a:af:58:ce:f2:22:
22:48:fa:c7:31:99:cf:c4:27:d2:dd:ba:d6:72:c4:a0:40:47:
4b:10:96:91:de:cd:f0:74:9a:3a:6d:24:67:12:20:bc:e3:6c:
00:24:2b:c4:f6:f7:9a:dd:34:78:a4:4b:6b:7b:15:2a:b0:97:
6a:00:2a:15:b7:2b:03:68:b6:35:cf:af:38:52:c4:6e:cf:61:
fd:d1:7b:33:2f:e0:55:34:18:12:d8:6f:93:86:64:5a:8b:0d:
f0:86:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:56:09 2025 by rpki-client