Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
File: abc03ea6-f529-3aa9-8649-ff39d4312020.roa (raw, json)
Hash identifier: T7gVlcEH6uicc++heYpva2uUkA9KtelZd6iOxBKFJc0=
Subject key identifier: 14:7D:A6:60:65:D4:07:28:A4:EE:65:C6:C0:68:E3:78:F3:40:BD:DB
Certificate issuer: /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial: 010D0C9F43285848E59BBF685CB648A25298FC00
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 395287
IP address blocks: 192.104.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:bf:68:5c:b6:48:a2:52:98:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=5403e399-d955-4fa9-995b-b6e4ec47af33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:25:9f:a6:cd:1e:b7:9e:35:5e:93:22:ff:
60:2b:55:f5:76:33:6c:64:f9:1c:07:cb:eb:83:51:
fc:98:82:f4:d3:be:43:89:13:51:d8:08:00:62:5c:
5a:4d:99:6a:d9:f1:58:e0:c5:74:ef:60:5c:1d:38:
a9:c0:a6:f3:3d:d0:71:ae:5f:d7:8b:ec:d8:77:93:
6a:92:38:ec:d7:d7:81:f6:d2:97:b7:4c:93:61:64:
91:4c:f0:b2:41:c1:d3:a9:03:45:d4:06:c4:65:20:
83:0c:29:68:0b:e8:ce:63:10:51:1f:44:01:e7:b0:
d4:b5:59:32:c3:74:66:48:01:53:22:b8:c0:d4:68:
a8:55:7f:c9:a6:73:73:97:bd:46:6c:f2:5e:3e:c6:
6d:d9:95:0e:de:a2:6a:dd:64:e7:5f:48:9a:2d:24:
cc:b7:4b:7d:4d:8e:bd:cc:a4:b9:21:ab:10:0e:b6:
73:13:8e:7f:09:96:3d:c1:48:03:bf:10:c6:67:78:
af:29:79:9c:bc:72:bc:e6:f6:99:72:7e:6f:84:c6:
7a:a9:aa:c9:f2:17:5c:fd:36:20:47:be:59:c1:33:
07:36:29:29:ba:ef:74:55:6a:4e:1c:50:0a:d1:da:
3c:49:8f:88:f2:e5:a9:87:a4:49:80:fe:b2:18:80:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7D:A6:60:65:D4:07:28:A4:EE:65:C6:C0:68:E3:78:F3:40:BD:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
X509v3 Authority Key Identifier:
keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
sbgp-ipAddrBlock: critical
IPv4:
192.104.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:9d:79:e1:87:b3:a1:52:43:2a:62:5d:b8:69:37:9f:d9:b4:
dd:f5:29:d6:6f:5a:2c:97:d1:24:88:e5:8d:03:fb:e7:23:60:
bf:47:9c:4e:e6:3a:5f:95:b2:a5:4e:99:17:4d:ea:d9:a4:1a:
12:32:df:9c:25:91:ad:3d:7f:85:0a:0f:9a:bb:af:67:8b:60:
9e:95:b4:b4:f9:62:e3:6a:20:6a:ea:aa:38:b7:de:dd:75:ba:
2d:ad:09:17:65:c9:f5:a8:16:3d:ff:ca:4e:01:39:33:c6:55:
64:21:f1:ca:52:c9:6f:74:9a:37:f2:94:2f:8f:7e:8c:b7:8f:
ec:8a:03:fc:76:49:17:8f:e7:c8:c2:ac:3c:67:de:08:33:22:
bc:75:92:17:cc:b6:8b:6c:80:69:67:f8:28:f1:10:8c:ac:2b:
28:6d:ea:a1:19:78:08:37:95:a0:91:a2:9d:7b:ed:11:5f:48:
fc:dc:91:fc:3c:df:18:e6:5e:a3:da:50:a7:22:28:13:d6:b8:
c0:e9:69:af:cd:49:8d:74:4a:6d:c2:f4:48:28:7f:6f:75:a0:
52:fd:aa:4b:51:48:99:fe:d4:95:c5:17:37:05:ad:12:ab:3d:
ca:9b:22:eb:59:cb:96:60:7b:67:4e:21:fb:5c:6a:4a:cb:46:
e0:f4:03:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:00 2025 by rpki-client on console.sobornost.net