Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa
File: f984caa1-48ee-3a26-8d40-a1b14e45f110.roa (raw, json)
Hash identifier: 6Y+MypoJT6WZm2q9260l+cUxKs6hutr/R/mcmS04yPo=
Subject key identifier: 6E:14:4E:D9:B1:73:43:52:5B:10:E0:8A:5E:68:56:D6:90:6F:50:3A
Certificate issuer: /CN=74a39a1b-8414-451d-8610-7af7342dc8f6
Certificate serial: 010D0C9F43285849350EA4B6EA3678EDD4290580
Authority key identifier: 88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 21976
IP address blocks: 192.16.204.0/24 maxlen: 24
192.108.106.0/24 maxlen: 24
2620:45:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a4:b6:ea:36:78:ed:d4:29:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a39a1b-8414-451d-8610-7af7342dc8f6
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=fb20ff0f-0e46-4054-a660-b4b2ef84fafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3f:1c:3d:33:27:5e:4c:a5:ea:9b:33:e6:77:
00:3e:3f:8c:5a:59:cf:65:cb:fd:56:d0:2f:1c:32:
36:5a:d6:78:ef:6e:47:2b:bf:8e:56:28:d2:96:1a:
de:36:c2:46:2f:cd:76:88:75:b0:f6:c9:63:f6:51:
fb:55:3f:0c:73:df:6f:11:c3:b6:c1:8f:97:ce:83:
1c:8f:f7:89:d7:75:02:24:6d:80:7c:a4:ef:9c:d4:
2a:b4:dc:cd:4e:f2:22:e0:7b:a8:e9:b8:52:16:8f:
fb:6d:fd:04:8f:a3:0d:6c:74:ab:21:4b:d4:ad:c4:
79:d0:18:12:3a:bf:4d:32:3f:82:63:be:96:4a:08:
e6:35:8e:5a:75:8b:92:01:09:1b:ea:35:a5:b1:a7:
cc:29:21:94:7c:2a:d3:a3:f0:09:ff:5f:fc:db:62:
87:e2:f0:8c:8c:cb:d3:33:fb:6c:c0:f3:83:8b:63:
0f:57:94:0e:5f:cd:e2:5c:d9:8f:27:b9:c4:91:80:
f4:4d:17:aa:d5:0a:1e:1b:bb:2d:c9:21:27:23:19:
80:3c:63:bb:93:27:a8:4d:e8:4b:f7:b9:11:70:b6:
5b:4b:72:7e:8c:3a:96:09:81:29:53:b8:eb:fa:83:
c4:3c:c7:53:98:6a:48:ae:36:fc:55:d6:c3:cd:49:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:14:4E:D9:B1:73:43:52:5B:10:E0:8A:5E:68:56:D6:90:6F:50:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.crl
X509v3 Authority Key Identifier:
keyid:88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer
sbgp-ipAddrBlock: critical
IPv4:
192.16.204.0/24
192.108.106.0/24
IPv6:
2620:45:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:29:6f:6c:54:31:3c:7e:87:2c:43:33:d8:6e:ea:34:7d:6d:
8f:4a:57:b8:f3:a7:2c:02:ae:24:2c:d8:fd:15:e5:0c:49:6a:
ae:cd:2b:5d:ca:4e:48:67:0c:35:40:5d:53:7e:64:d7:d6:93:
e6:fe:60:a2:08:1a:ae:94:f4:9e:1e:88:60:a2:59:fe:3c:92:
e0:7c:f2:37:d8:1f:f5:00:3f:ae:91:44:dc:f6:8d:fc:ec:23:
7e:5e:ab:64:81:58:fd:7a:a4:5d:a9:94:6b:8e:d7:bc:66:7c:
2e:97:3d:1c:58:a5:c2:2f:6e:81:e8:f5:a2:c2:85:be:3c:58:
98:3b:e6:59:52:56:7e:22:fa:23:cf:9c:b0:1b:65:51:d5:4b:
11:53:e6:35:48:d9:8d:c2:c7:63:3b:88:b6:75:89:50:dc:2f:
b7:6a:f6:b8:2c:87:89:2f:86:25:0b:4e:bb:51:0b:81:af:35:
8f:2f:aa:e5:60:f5:2e:d0:ad:e5:09:5c:38:b3:c3:47:51:3d:
5f:96:2d:14:1c:ba:0e:46:5a:6e:e7:53:e3:0e:d1:06:b0:d2:
95:83:27:51:ba:fe:f8:b5:64:73:77:4b:5b:41:be:5b:c3:e2:
2a:2f:4d:8d:2b:3c:47:b0:bb:34:0f:2b:0c:e7:e7:0d:93:b1:
3c:71:d1:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:47 2025 by rpki-client