Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa
File: 4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa (raw, json)
Hash identifier: os8NsLBWW3i28BxNh+bnQU3qTeseqAKTTWXsrQaFygI=
Subject key identifier: 5A:9C:30:BD:46:99:F5:17:27:BE:70:F4:0E:3C:25:75:4A:17:83:80
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F4328584961B9910C85F78251E1EF8330
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 137922
IP address blocks: 136.228.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:91:0c:85:f7:82:51:e1:ef:83:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=f2820c0d-d8bc-47d5-9afc-83961eca7f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:c9:b2:1d:c5:84:9a:ef:d9:9f:43:b5:cb:
db:1b:59:d8:fb:98:5c:7d:9f:d5:cc:a1:40:c9:38:
b7:f1:b0:58:31:e1:7d:56:25:6a:0d:ae:b7:e5:e5:
d0:94:c6:ef:27:83:3a:ab:fd:6f:c6:2d:b0:06:07:
11:4c:d4:6a:24:81:24:e6:9d:30:4e:26:89:2e:6f:
32:b6:3c:29:9d:69:20:5e:1f:d7:69:0b:27:d0:28:
d0:61:a5:bd:a8:b7:28:88:8f:49:1a:ca:70:71:8d:
8a:52:06:25:8d:89:ff:b1:bd:8a:2f:15:ff:bb:fc:
4e:ed:7c:f6:da:7d:82:ad:4b:73:bb:a7:a3:85:d9:
01:79:0b:bc:1f:ff:53:f8:f3:fb:1e:1c:01:0a:f6:
25:54:77:ee:3f:dc:e3:ae:8b:64:ee:74:07:dd:88:
c6:f4:98:f8:73:14:4b:b2:a4:91:bc:29:a5:be:6d:
5c:9f:47:2a:dc:01:5e:65:19:33:be:4b:38:1b:2e:
a4:5b:e7:9a:6f:66:a8:51:e8:04:c3:90:23:67:0c:
f8:d4:b2:4c:13:a4:f4:af:90:6a:84:f6:28:7e:a0:
1b:e1:6f:45:ae:d7:8c:3e:b3:13:8e:4e:58:a0:fc:
bf:ee:70:48:e6:6a:62:78:fa:7a:b2:a8:80:59:82:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9C:30:BD:46:99:F5:17:27:BE:70:F4:0E:3C:25:75:4A:17:83:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:7a:9b:7f:7b:18:06:61:88:ca:ad:d9:1b:ad:87:64:4e:79:
14:4c:92:2c:2c:82:af:1c:68:c8:3a:4e:04:26:da:54:14:4f:
5a:83:19:3f:41:12:ab:c2:82:e4:74:67:bb:84:ae:94:33:ee:
59:a9:e0:00:55:10:b2:c4:59:6c:f9:50:97:81:be:e1:20:7a:
36:43:fd:f4:41:cd:19:2d:9a:25:6d:48:17:c3:e1:ca:58:ad:
37:eb:fa:92:8c:6e:5c:7e:f5:d8:c8:95:51:f6:78:f2:48:9e:
03:15:e5:b3:0b:5d:2b:e1:61:e3:3e:7f:37:2f:36:d1:a5:4b:
14:ab:50:f3:24:35:c8:56:84:6e:cf:a4:a3:2a:76:f9:d1:17:
a8:2c:9e:15:31:cf:7b:35:6e:b8:75:59:6d:ec:33:3c:99:c3:
85:5e:fe:df:29:e1:25:b9:c2:32:75:27:86:87:68:ed:7b:da:
5b:76:3d:e7:ec:da:24:1c:4d:83:a3:b2:81:83:a3:41:8e:da:
ec:66:5f:ec:5c:6a:31:08:ae:cd:6c:64:d5:d4:55:6f:4c:30:
70:4b:df:5a:27:e6:d5:e0:c3:61:aa:af:7b:4b:6e:d7:38:ed:
2d:ca:da:e2:81:96:cc:d3:c5:60:63:81:9b:eb:93:6a:92:54:
24:15:ff:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:12 2025 by rpki-client on console.sobornost.net