Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa
File: bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa (raw, json)
Hash identifier: h+2cPOuZLjZgVzi9g8VrYLkdNXZIpZ7hTR/ggtrY+Qk=
Subject key identifier: 1E:A7:21:91:7E:90:D1:E0:D7:AE:92:10:18:6F:8B:FC:43:9C:57:0E
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F432858496A19A756DA41FF7C0DEC1D80
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 25779
IP address blocks: 206.168.9.0/24 maxlen: 24
207.174.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:a7:56:da:41:ff:7c:0d:ec:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=b9e8380a-0248-421f-8b67-4a81c778367b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:bf:18:a6:3c:8c:66:bf:dd:d9:59:e5:a3:
58:36:f6:6e:22:2b:17:12:07:d7:33:9c:01:e5:be:
44:57:8c:eb:c3:80:f5:37:3b:ad:fe:f0:9b:1e:89:
95:3d:14:1f:d6:92:96:04:f3:18:fb:bf:a8:63:01:
4d:a3:89:81:91:53:8a:3b:f8:9d:34:e3:b1:f8:21:
48:35:3d:ec:85:bc:f3:09:c4:cf:33:17:af:50:7a:
d0:92:6b:fe:0b:91:72:e4:76:4c:91:57:95:c2:dc:
c4:89:f7:85:f9:b3:45:30:db:ae:f9:9b:a6:8a:28:
36:49:be:cd:26:c6:49:e4:39:4a:d9:2c:14:3b:2d:
e4:9d:9a:e4:74:96:4e:ca:c5:78:0d:99:8d:73:10:
5f:72:d6:6f:40:ff:eb:6b:db:fd:08:71:96:85:f2:
89:c0:fe:8f:9e:fd:f9:e7:e1:89:90:75:63:93:62:
bc:a5:c5:73:98:8c:05:76:80:38:fd:d0:b5:77:f2:
37:18:6f:1f:6b:ff:46:c7:09:ba:ff:3b:27:48:c4:
09:4e:4a:b6:bc:d9:c7:ae:fc:d6:10:a1:42:86:d4:
a3:4d:bf:a9:8d:ea:f4:d7:e5:b9:c1:c9:fa:14:33:
05:25:06:b3:4e:8a:6e:0c:c5:50:dd:25:0c:be:d4:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A7:21:91:7E:90:D1:E0:D7:AE:92:10:18:6F:8B:FC:43:9C:57:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.9.0/24
207.174.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:62:14:ea:26:f1:61:f5:0b:d9:e6:df:e7:de:54:e9:31:f4:
e8:6a:e0:0c:a7:6f:26:44:b4:9e:27:eb:0a:df:dc:d3:d3:e1:
b2:58:75:27:5d:cc:54:54:ac:f2:a6:ed:6a:c5:4a:ca:00:4b:
dd:0a:f3:4a:99:3b:f8:0e:3a:9f:07:c4:63:a8:41:83:ee:2c:
23:62:eb:73:ae:27:68:9b:1a:2b:1f:18:35:0d:3a:45:b4:36:
21:06:04:9a:db:d5:10:18:ff:95:2f:2d:f7:6b:30:e1:35:55:
ec:be:01:0d:bd:4c:c8:1f:97:be:94:04:36:7e:0d:7e:d7:4a:
2a:61:64:d4:d9:11:fa:42:48:e1:ec:f6:a9:c3:f5:9a:70:9b:
5a:cf:83:d3:e6:dc:ef:e1:92:99:d9:a7:4e:3b:67:8d:02:dc:
da:f7:38:17:9b:75:0d:20:de:61:b9:1b:d7:45:9a:37:2d:3f:
0d:6f:49:a1:31:06:6b:de:59:59:15:68:1c:ad:ae:24:5d:14:
77:78:43:cf:72:61:ba:6a:94:cd:89:e9:29:eb:ec:27:a6:b7:
d4:ee:b3:65:2b:e5:49:dc:36:bd:00:7a:ed:fe:4e:c5:0e:bd:
81:40:0c:96:06:a8:cc:89:48:d9:93:0a:c9:c5:8d:bc:33:b4:
a5:8e:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:40 2025 by rpki-client on console.sobornost.net