Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa
File: 40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa (raw, json)
Hash identifier: Uj8DEh5ssp/1VFLYV65/zQOn7yYWC1WG4wNQdlXDTbw=
Subject key identifier: 37:74:2D:C1:75:30:28:8F:28:3D:B8:6F:0E:70:4E:C2:95:16:8D:9A
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F4328584961B98CA2C874368DC0D5D3D0
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 137922
IP address blocks: 136.228.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:8c:a2:c8:74:36:8d:c0:d5:d3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=ffe6b65b-f8d8-4ac1-924e-60c6c72aa89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:fc:cd:1a:33:fb:29:e8:4e:0d:6c:66:a0:
1d:3a:d9:0b:e3:cb:b7:8f:43:ff:41:2a:b6:9d:5e:
40:98:88:83:c2:60:d4:5c:20:28:88:ae:10:19:d4:
88:c4:c1:f2:ff:e1:fc:da:9b:81:09:1c:aa:29:8e:
92:02:bc:51:34:5c:ca:09:b2:3c:0e:15:b5:39:d8:
a0:ca:c7:b4:fe:a8:0d:fc:a3:4e:d2:30:9a:ca:29:
92:b0:11:09:f8:33:98:24:8b:38:68:ca:a0:e9:82:
0b:a1:36:14:eb:08:37:bd:be:84:b4:db:17:d7:75:
75:5f:42:70:c8:b7:54:59:a1:f5:ca:e6:cc:17:37:
c0:26:03:38:58:37:79:96:bb:7d:e8:64:53:78:32:
d0:fa:a6:d4:7a:35:d6:56:ee:8f:2e:a9:fb:23:f0:
cf:ed:a4:fc:08:37:b9:f2:fa:61:d5:88:68:8a:e7:
53:dc:ea:f4:e7:51:07:22:0f:12:d7:3b:17:46:a0:
55:ea:21:7a:cd:30:50:8e:df:c7:2a:2c:08:c5:73:
c4:cd:1a:24:43:42:6c:0b:af:2c:9b:c2:cf:e6:de:
56:e8:20:be:66:e7:c6:75:be:77:47:64:1e:f2:e0:
fb:1d:7f:c5:39:ae:99:ca:3c:95:42:71:7b:7a:fe:
22:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:74:2D:C1:75:30:28:8F:28:3D:B8:6F:0E:70:4E:C2:95:16:8D:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:31:f3:d1:87:8c:4b:b8:96:cd:98:f1:4c:49:b6:6b:b5:82:
c8:e8:cb:ed:f0:0e:9c:8d:03:0e:07:84:19:b8:cf:8d:16:f3:
13:fb:7a:c7:f2:e9:85:ae:e9:b3:85:9d:d9:da:31:45:43:3a:
d1:2e:09:c5:46:9d:8d:3f:a0:2b:a4:8a:87:36:24:64:11:06:
73:5c:f2:f2:46:5a:f9:cd:51:bb:3f:01:40:4a:37:28:c0:50:
61:41:47:48:63:7e:2b:93:b0:79:7a:44:c2:bb:b9:c1:8d:0a:
15:41:cb:bb:28:05:e3:5a:6d:2e:5c:9a:e2:06:27:c3:de:69:
e9:03:3d:09:db:05:ac:59:97:ff:ee:98:fb:ba:d3:d0:19:1b:
ce:a8:86:65:c6:d7:9b:27:a6:1b:66:fe:9b:c2:a0:49:a5:70:
c7:6c:8a:b5:8a:aa:ab:60:a9:08:ac:52:22:23:14:f6:64:fb:
d6:c4:a0:07:7e:c0:a2:01:22:06:97:b5:43:61:ca:e5:68:ba:
64:a1:2b:0e:05:cd:06:e2:ca:24:93:33:ad:ca:da:bf:e8:f8:
73:92:32:39:f9:af:d6:92:56:25:f9:14:16:72:3f:77:e0:95:
6f:c2:a2:d1:11:54:e2:75:d5:14:07:97:17:9a:0d:78:f9:4c:
e9:8c:1d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:12 2025 by rpki-client on console.sobornost.net