Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa
File: 06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa (raw, json)
Hash identifier: 3W8M4+L5UcrF4X61g7YvE8h6NXq6Cnsx5MRH3y6Aeuw=
Subject key identifier: CC:37:95:C5:F1:19:22:FA:62:85:62:3F:8D:7B:9A:43:CD:7D:42:E0
Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial: 010D0C9F4328584919418D8CB8B315D42CAFB950
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 30158
IP address blocks: 199.189.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:8d:8c:b8:b3:15:d4:2c:af:b9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=05a71c4e-6393-435d-a2b4-12f5fe74a26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:93:bc:04:ec:32:1a:f2:46:15:e3:69:08:
fe:e1:f8:ce:97:7c:6b:bc:f1:1e:ce:ca:fc:d2:38:
5b:ec:fc:39:a0:04:56:71:ee:bc:59:f5:7c:14:c9:
d3:4e:2f:fd:f3:52:8f:96:d9:91:d9:18:94:df:fc:
4d:a1:fd:32:13:e7:09:e0:53:52:63:e3:bf:70:d9:
cb:8f:a9:ef:80:4b:99:9b:da:b4:49:03:48:43:45:
87:81:7a:46:32:e3:dc:7d:a1:81:15:ce:89:58:12:
57:f5:2f:d3:ce:12:ce:20:7c:4d:57:c3:21:42:96:
81:16:d2:12:1d:09:3e:8b:7f:d2:b7:79:81:35:60:
6f:10:95:a4:29:3a:d3:37:ac:94:16:ed:2b:d6:d2:
be:76:ce:4d:11:7d:dc:f6:1d:28:85:bc:00:6e:dc:
71:da:3b:07:fa:03:87:18:0f:38:df:98:99:f4:a5:
f5:48:96:d3:2a:34:6c:78:94:5b:33:42:93:3a:92:
55:bb:c9:d7:67:90:87:64:03:ee:4a:0d:9e:f3:b9:
b5:90:10:56:e5:e3:20:1c:67:ac:d7:8c:5a:a3:4f:
92:ea:55:52:31:8b:b4:ba:83:63:a1:24:fc:43:55:
fc:9b:65:bd:27:59:8d:3c:0b:68:c4:c4:63:31:a7:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:37:95:C5:F1:19:22:FA:62:85:62:3F:8D:7B:9A:43:CD:7D:42:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
X509v3 Authority Key Identifier:
keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
sbgp-ipAddrBlock: critical
IPv4:
199.189.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:9d:ac:3b:8d:b4:15:49:04:ca:28:a4:14:d6:5d:71:be:d3:
0f:a5:79:de:eb:76:f8:7f:f7:a3:ba:fe:8b:75:d2:d0:fe:78:
67:de:42:1d:2d:26:c0:1b:34:37:db:f8:39:0c:a6:c8:85:5a:
9e:66:f4:6a:b4:01:33:22:95:ab:fa:c1:e2:a7:0e:02:fc:38:
25:e4:41:41:e2:3e:5c:d2:05:b3:09:a9:a9:b7:86:84:f5:2d:
99:e3:b9:7d:ab:3e:b3:c2:9b:e1:fa:a6:34:4b:3a:25:15:50:
04:be:76:8a:0b:47:6f:f6:95:09:75:ce:8b:e4:69:2c:19:6b:
1a:ad:bc:a0:ff:10:a0:82:f5:1a:aa:e6:44:ed:71:de:5a:0b:
17:6f:a2:de:df:e0:a0:86:17:84:89:86:9e:ff:06:3b:94:58:
0e:e0:6d:b4:4b:17:03:49:1c:46:9b:05:19:e7:36:42:47:4f:
c9:4d:ca:c2:c0:4d:7a:60:b9:e1:89:c4:fe:93:1d:b5:85:78:
3d:e8:f6:54:5b:c9:3a:be:8e:f5:ca:3a:7a:df:8e:b0:74:76:
58:8c:1f:ca:f0:04:c9:e8:44:0e:2c:13:ce:11:e2:c9:a1:ee:
7f:6f:26:3d:18:c9:5f:de:d6:7b:aa:6d:20:26:54:87:2c:81:
3a:76:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:02 2025 by rpki-client on console.sobornost.net