Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/839341cc-0aaf-3471-af94-3361bd95b2ae.roa
File: 839341cc-0aaf-3471-af94-3361bd95b2ae.roa (raw, json)
Hash identifier: 0Yy2aOTwKrQBqAtH5z+L2NnSV7ALOpFXKgLQ6UnBUYw=
Subject key identifier: 29:DA:03:75:98:B2:33:B6:AB:C4:43:79:D3:4B:3F:70:DD:2F:81:15
Certificate issuer: /CN=0abec8f8-ce42-427b-82b4-7accd51f9db8
Certificate serial: 010D0C9F4328584981D455069A5BF0767DF3DFC0
Authority key identifier: B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/839341cc-0aaf-3471-af94-3361bd95b2ae.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 16509
IP address blocks: 168.203.5.0/24 maxlen: 24
168.203.6.0/24 maxlen: 24
168.203.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:55:06:9a:5b:f0:76:7d:f3:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abec8f8-ce42-427b-82b4-7accd51f9db8
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=03403270-8010-4709-9a8d-66928d65351f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:f6:5d:e5:5f:f9:bd:d3:ae:2e:5e:df:48:
e7:35:25:9c:91:d6:f5:ec:64:01:65:9d:e9:d4:4b:
c6:8c:09:bf:ce:d4:c9:ca:e2:a4:a4:df:da:d6:10:
ca:bc:ba:39:d3:86:0e:d3:ff:60:89:34:c9:e9:58:
69:af:7a:ef:b1:dd:a4:4d:47:df:76:af:f0:fc:34:
b0:66:57:f4:a7:e1:b1:11:3a:f1:a2:80:5d:80:90:
a8:aa:f2:d9:f7:6d:a2:00:17:77:a1:37:ff:f1:ea:
84:d4:4a:bd:05:09:1f:6e:bd:d5:79:09:fb:1f:01:
ab:20:02:7d:78:6b:26:61:4c:c8:cb:ab:ba:54:b0:
6f:e8:4a:08:14:e0:39:ea:46:0e:1a:2c:32:9c:65:
0b:b6:ad:9e:e3:dc:c7:dc:f1:02:f6:f9:8e:b5:cc:
ca:54:9f:be:8a:9b:89:77:4d:e2:1d:d7:18:26:1f:
51:d2:f4:42:78:0d:bc:82:fb:bf:f5:3e:26:80:2c:
ca:97:37:ef:6f:34:e4:5c:35:16:bc:95:8b:82:05:
83:8e:2e:45:c6:2c:05:3b:1d:07:2e:b1:b4:eb:1f:
27:fb:8b:bd:7b:16:7f:14:39:50:e4:d5:fe:90:c4:
24:c3:e6:fd:22:62:d6:89:fd:ca:dc:96:8a:76:8d:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DA:03:75:98:B2:33:B6:AB:C4:43:79:D3:4B:3F:70:DD:2F:81:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/839341cc-0aaf-3471-af94-3361bd95b2ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.crl
X509v3 Authority Key Identifier:
keyid:B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer
sbgp-ipAddrBlock: critical
IPv4:
168.203.5.0-168.203.7.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c0:11:bb:02:2d:43:39:5b:8f:34:d8:5d:a2:66:b4:0c:c3:
c1:36:cd:6f:47:a7:2c:6f:df:fa:c0:9f:7f:e4:5f:d0:4b:41:
14:dd:b6:db:a1:9a:e9:04:79:fb:ad:e4:03:03:db:62:2f:ac:
b5:df:ab:49:59:f5:0b:65:85:a7:1c:90:03:6d:e6:19:f7:73:
32:4a:cd:9b:50:ac:23:53:03:25:20:b9:d0:0f:89:3b:ef:dc:
19:7f:45:36:11:20:d0:0e:32:c2:54:67:12:b4:61:28:08:2c:
e2:95:58:e8:37:cb:cb:e4:44:cc:ee:89:56:cb:1d:40:a0:b2:
ab:d5:ad:75:26:08:da:25:e3:2c:c8:2c:6f:6e:00:fc:5c:38:
28:1f:c9:48:89:64:e0:f5:93:e6:cd:c3:2d:b7:a3:df:c9:09:
08:66:3c:11:45:e2:1a:46:f0:f3:f4:31:e4:62:fd:19:7e:7a:
4c:f6:5b:14:70:3a:82:40:8d:50:1a:8f:89:b0:7f:6f:e4:24:
76:02:a9:35:a6:ba:f1:d4:21:07:61:81:8b:42:22:ff:25:72:
fe:1f:f4:62:67:a9:28:96:3c:5f:b9:3a:94:af:05:6a:8b:04:
09:d8:d2:8b:be:a5:b9:a8:ad:dd:fc:b0:f9:6b:92:00:45:3c:
79:e5:5c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net