Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa
File: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (raw, json)
Hash identifier: xD7rWjf84+aZk6zf/llql+XmyZXFND3bh6FN8lSYjQA=
Subject key identifier: BE:4C:8E:25:CE:36:04:FB:1A:97:19:EF:3E:56:0C:A6:47:C4:5F:80
Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c
Certificate serial: 010D0C9F432858495ABEBE918B7FB3FF1FE8EF80
Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 4755
IP address blocks: 208.78.16.0/24 maxlen: 24
208.78.17.0/24 maxlen: 24
208.78.18.0/24 maxlen: 24
208.78.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:be:91:8b:7f:b3:ff:1f:e8:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=7d59e926-fc2f-4ad8-8272-c913b13904fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:a5:48:8c:cb:68:fc:0a:46:88:36:8c:2e:
ed:06:fc:a9:b9:72:cd:8e:ae:b4:b6:e8:25:a2:88:
61:bc:fa:17:8d:83:c2:bf:75:3b:9e:a4:a4:dc:f0:
0f:53:71:1d:b8:f0:97:a9:ba:32:af:1a:6b:99:9e:
b6:f6:91:5c:13:e4:d8:cf:b6:6a:92:dd:b1:e9:bb:
a7:70:1e:b9:fd:17:7a:03:50:0f:8c:5c:5e:f0:31:
63:56:3f:bc:e9:21:9f:6d:e3:e7:c1:e9:e4:72:04:
ea:0f:4b:cb:9b:1b:f2:6f:9f:5c:d5:29:cf:bc:8e:
30:fc:3d:1a:aa:66:24:69:ca:c1:0e:a4:1d:18:c2:
fd:e0:e4:74:6e:b6:68:09:c1:f9:e4:77:34:88:05:
66:4c:ce:36:82:fd:23:28:c1:11:3e:5f:34:5b:4b:
98:b3:95:58:13:db:10:ef:c1:a1:0e:e0:a7:da:70:
ad:55:de:75:6f:b5:c0:23:72:48:10:4f:fc:ab:4d:
05:48:f7:b1:a2:ab:e6:0c:c6:21:f7:5d:d3:cf:ae:
33:c6:ed:08:fa:34:57:9b:13:fa:6a:f5:b8:f3:6a:
7e:22:d3:a9:50:a4:45:22:a3:96:61:23:1a:1c:bf:
f9:a7:cb:ba:77:ad:16:bf:e5:ec:c9:6f:8f:cb:d6:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4C:8E:25:CE:36:04:FB:1A:97:19:EF:3E:56:0C:A6:47:C4:5F:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl
X509v3 Authority Key Identifier:
keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.78.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:12:9c:90:d3:17:db:b2:0b:83:a8:1e:f4:8e:c5:1c:06:83:
f9:8a:5b:f2:ad:d5:1f:d4:a9:4e:a7:a3:96:a3:23:55:e7:c4:
d4:2c:07:f1:16:eb:93:49:ce:1b:dc:19:2d:b3:79:ff:5f:44:
ac:6d:23:d2:0c:b1:fd:73:c9:c7:2e:d8:b2:4c:6f:82:5d:09:
e3:ba:55:49:8c:cf:2f:04:e2:1e:01:f0:be:72:e8:d4:78:a7:
e7:f3:3e:ae:c5:a3:84:ea:b9:49:5a:f0:2c:7d:37:51:e3:b6:
6d:a8:d8:b6:3b:78:fe:53:d8:b3:f8:fb:64:5a:e2:82:c2:2a:
d8:ef:9b:d0:f3:42:60:98:48:17:3b:50:ce:f4:42:b7:12:dc:
af:d1:7a:e8:d3:49:f9:2e:e7:05:40:0c:ed:67:36:f2:bf:06:
43:6e:07:73:39:71:67:36:b3:61:9a:13:cc:a6:7a:fd:bf:a9:
4f:a5:63:ad:c8:af:2c:06:80:65:77:4c:69:53:46:52:84:69:
ec:3d:00:7c:e2:20:80:3a:09:18:8b:ad:b0:c6:07:d5:a1:16:
a4:58:73:85:e3:21:3a:26:05:c3:10:49:37:d6:53:6b:ea:07:
45:7a:83:ea:53:a3:15:84:af:b5:f4:96:63:6a:4f:55:5b:09:
87:6d:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:12 2025 by rpki-client on console.sobornost.net