Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/3c1b2bb5-8686-3190-a165-a8af697d7936.roa
File: 3c1b2bb5-8686-3190-a165-a8af697d7936.roa (raw, json)
Hash identifier: 4MxcTwzj9hAyeasjiclB5XWIRMemCIE55bLhLZvPeRc=
Subject key identifier: 93:EA:EE:C8:7A:01:48:C8:13:13:B9:59:44:46:43:0F:D3:1F:BC:DA
Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial: 010D0C9F432858488280983FC7FA8E401984AE40
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/3c1b2bb5-8686-3190-a165-a8af697d7936.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 6498
IP address blocks: 75.78.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:98:3f:c7:fa:8e:40:19:84:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=404399d0-43c2-4e05-ab76-20e45a76fe0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b3:93:9c:16:1d:81:01:5e:50:d2:19:f4:7d:
b6:d6:32:bb:3c:61:6c:30:4c:fa:64:f2:40:bd:53:
fc:aa:cd:b0:7f:8a:a8:15:98:65:70:bf:04:f1:38:
9f:ac:42:ac:5a:3d:bd:d5:41:2d:43:b9:d4:c2:be:
82:43:dc:ea:09:7e:44:92:7e:ae:b6:3b:93:81:0c:
72:5c:39:a3:99:28:da:02:32:be:0c:2e:8d:c0:68:
fc:bc:92:3d:ee:8d:28:e7:89:a8:fa:8a:01:d5:c5:
12:be:01:af:ff:18:9a:ab:8c:a9:35:1b:a8:fc:76:
be:0c:36:69:fc:bc:a0:f9:a1:44:d3:45:c6:26:90:
50:a9:5f:d9:27:1a:19:03:94:6a:14:43:ea:64:f9:
3f:a8:6c:c7:36:a2:23:b2:c2:0f:15:38:ef:8e:45:
67:1f:99:03:cc:66:18:00:6e:30:a3:d7:9e:d5:30:
65:4b:87:b4:51:d3:26:ca:aa:c1:8e:8c:ad:a9:58:
eb:8e:4f:84:ef:c0:38:40:0d:9d:23:48:8b:52:7d:
b0:2a:b7:af:59:34:2c:cd:77:15:3b:be:45:f4:14:
f6:a0:b8:5b:c5:38:27:47:df:2e:52:38:82:67:08:
2a:03:33:2c:32:9f:78:19:30:a8:97:3f:8c:37:fa:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EA:EE:C8:7A:01:48:C8:13:13:B9:59:44:46:43:0F:D3:1F:BC:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/3c1b2bb5-8686-3190-a165-a8af697d7936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
X509v3 Authority Key Identifier:
keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
sbgp-ipAddrBlock: critical
IPv4:
75.78.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:23:ca:d5:af:d4:b8:59:0a:d0:35:16:42:4e:25:bf:24:f4:
14:10:b0:65:a3:63:ab:dd:91:99:b2:5f:82:8e:6e:b7:3f:db:
c3:93:ed:1f:a9:c4:57:00:d7:d6:7b:59:ef:34:90:5e:77:83:
8b:3e:7a:6b:b1:36:e5:a1:ed:f9:bb:1e:66:f1:08:6a:0b:71:
40:5c:69:c5:3e:b4:10:b0:b0:90:80:8e:8d:57:49:80:b5:73:
b3:d8:98:20:35:47:dc:bf:6c:e3:01:a6:6a:d4:b3:8d:90:37:
03:e5:7f:c4:89:90:34:2e:13:25:bf:e5:ec:2d:6f:f2:68:34:
eb:e6:47:fa:dc:d4:53:9f:44:7e:66:3f:04:45:cd:50:84:18:
33:56:d9:61:ab:93:ca:c7:9b:25:25:ac:05:5a:a9:07:aa:4e:
b7:fb:21:c2:21:7c:19:f5:b3:79:da:39:5a:fa:99:2a:53:af:
3f:f7:14:8f:08:59:19:3d:fc:c0:b7:a7:fe:88:6c:c6:bf:57:
cc:25:7e:2f:bc:9b:0d:4b:1c:40:5e:29:d8:f4:38:69:df:cd:
6b:dd:0e:a2:2f:a4:80:c0:89:75:4d:95:73:d9:4b:83:a6:92:
5d:0a:44:78:06:91:7d:e1:0d:93:c7:1e:d9:0e:35:53:4b:1e:
d4:bc:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:43:26 2025 by rpki-client