Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa
File: 6436fe84-15d0-3af0-956b-b3cb8a063158.roa (raw, json)
Hash identifier: piGqlakvmv9khkBgPem1MPm3J4TYjoyE7+OTeaEtlNg=
Subject key identifier: A2:A7:CB:29:1C:98:B8:50:22:50:55:C2:B2:8F:1E:65:F3:72:57:00
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F432858497974415EAF69A551744A8380
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa
Signing time: Thu 10 Apr 2025 01:00:46 +0000
ROA not before: Thu 10 Apr 2025 01:00:46 +0000
ROA not after: Wed 09 Jul 2025 01:00:46 +0000
asID: 398420
IP address blocks: 216.246.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:79:74:41:5e:af:69:a5:51:74:4a:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Apr 10 01:00:46 2025 GMT
Not After : Jul 9 01:00:46 2025 GMT
Subject: CN=3e9e4376-27e1-4c2e-9ffe-1e8bb1656454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:13:ae:ec:91:d0:24:23:d2:20:14:5b:09:
d7:89:22:c0:b6:ba:f8:b1:84:87:19:20:d4:b3:6c:
9a:1d:b3:ad:31:86:23:89:c8:63:f6:8d:b7:67:74:
1d:20:17:80:60:a5:50:36:cc:58:d5:f3:b4:dc:0b:
57:58:68:51:b3:f3:03:2a:c4:20:2e:9e:cb:6d:6d:
92:0f:94:34:74:2e:1b:de:65:2b:a7:48:c5:e0:ea:
8f:64:aa:07:07:93:66:8e:d1:4c:3d:46:86:1a:d0:
03:d6:b8:a2:5d:d6:5e:4f:6b:49:da:35:cf:a3:cc:
f8:c1:c3:1d:94:91:e3:d1:04:ed:d4:3c:99:8f:31:
4f:a6:f4:5d:ca:c5:b0:58:8e:38:3a:74:f7:ca:78:
97:52:43:76:c1:87:07:d4:fd:05:e5:31:39:b8:fc:
b7:db:d9:eb:e1:0b:99:80:34:36:f3:56:e6:f2:0a:
2d:78:79:9d:f9:72:45:ef:71:6b:17:58:11:1c:96:
1d:a3:b2:d5:8c:3f:41:66:6b:80:b8:94:96:d4:8a:
c5:36:35:af:93:f9:4a:79:f4:32:b0:7d:a2:bc:25:
9f:38:f7:14:7b:7a:43:67:d9:3b:2e:eb:c6:7a:da:
12:49:3b:cf:aa:c9:01:ae:b2:62:83:03:95:0f:45:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:CB:29:1C:98:B8:50:22:50:55:C2:B2:8F:1E:65:F3:72:57:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
216.246.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:e1:f9:c3:16:5e:e0:05:0f:b4:ef:83:ae:7f:fe:fe:39:3d:
3b:ca:19:b8:e3:10:01:0b:6d:80:2d:5b:f1:1e:17:1a:84:aa:
18:31:a4:36:19:f8:2d:df:99:58:a9:51:b0:d4:40:cf:29:6d:
74:7c:be:99:5a:62:bc:a6:2e:6b:52:96:54:38:3f:24:88:eb:
48:e8:9b:2d:ff:b6:6c:7d:af:04:b2:c6:aa:e8:37:c4:1f:de:
43:37:4e:f0:e8:5e:53:84:50:8d:6d:d9:e7:df:0c:0b:b5:53:
5e:e4:ec:57:cf:36:fe:b7:69:7c:d2:8a:f7:91:48:0a:c9:d4:
45:c5:13:03:05:4b:e4:dd:0b:64:08:2b:47:c8:71:e1:be:0a:
6b:30:3b:8f:0d:e4:06:f2:90:b7:f7:43:35:3a:24:78:0b:64:
bb:af:a6:00:2e:fd:a6:99:fa:61:fa:ca:95:03:c4:f7:f9:c5:
ce:f1:2a:84:7c:25:98:31:64:b9:04:35:93:46:18:e8:50:3f:
7d:4d:0f:a2:04:da:cd:54:06:bc:94:d7:ed:71:60:4f:59:6e:
86:3f:da:a2:55:ba:1e:ad:a5:23:ad:35:f4:55:7a:ce:7b:a8:
e4:20:b3:6b:24:93:0a:17:5e:e5:5a:d6:3c:f8:65:60:64:92:
06:6b:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:51 2025 by rpki-client on console.sobornost.net