Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/3548cc65-f016-324c-84d5-fc72048cc5c8.roa
File: 3548cc65-f016-324c-84d5-fc72048cc5c8.roa (raw, json)
Hash identifier: BXk5aqbGVKETDuDR1PGEAxJZ+Z4MPdNB91SoHwxMTB4=
Subject key identifier: 72:C9:62:CC:93:33:16:A3:F1:09:71:95:D1:7F:FE:15:CE:07:84:1B
Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial: 010D0C9F4328584930DE6FC874325CF9CE433FC0
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/3548cc65-f016-324c-84d5-fc72048cc5c8.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 14618
IP address blocks: 206.146.130.0/24 maxlen: 24
206.146.131.0/24 maxlen: 24
206.146.132.0/24 maxlen: 24
206.146.133.0/24 maxlen: 24
206.146.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:6f:c8:74:32:5c:f9:ce:43:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=4b4ad41f-8b27-4e54-9439-6cef7efef935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d6:bb:26:0e:94:14:9c:d7:ce:44:ce:b8:fe:
c3:dc:df:73:fb:44:f7:3c:b2:a9:4f:b7:b4:4f:06:
48:57:32:49:84:f4:aa:b4:72:b7:08:2a:15:7d:2a:
78:1b:2d:7c:83:68:e5:4f:c9:40:f4:a0:5b:2b:28:
29:1a:36:03:84:24:62:d4:b2:c4:59:a0:38:8b:50:
72:45:02:78:a5:b7:d3:9b:21:f6:05:36:33:b5:c5:
7d:bb:e0:27:1f:f1:aa:11:08:28:f7:50:ca:d7:83:
78:35:b6:fb:b4:3a:0b:98:12:be:5e:e9:81:86:d5:
53:6c:15:24:5b:04:39:64:85:33:0e:4d:57:41:65:
45:5f:1d:b7:c0:74:8f:be:6a:8d:04:9f:fa:63:27:
af:af:5e:45:fd:0d:c6:4e:d3:db:b3:43:2a:f8:e3:
61:6e:ef:0d:7d:4f:5c:df:75:ec:d0:ec:b6:ad:f8:
c0:17:a1:6e:d4:ad:24:19:9a:f1:a1:ce:11:52:51:
8c:fc:1f:31:09:1c:bf:e4:88:d2:94:55:db:05:cb:
b7:92:bb:48:b3:ac:10:4d:8b:02:bc:7a:15:8c:cf:
5a:03:42:78:66:f7:76:d8:06:bc:19:b2:07:5c:aa:
be:88:d2:e2:42:45:e3:de:8b:a7:13:80:48:8f:7b:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C9:62:CC:93:33:16:A3:F1:09:71:95:D1:7F:FE:15:CE:07:84:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/3548cc65-f016-324c-84d5-fc72048cc5c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
X509v3 Authority Key Identifier:
keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.146.130.0-206.146.134.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:bb:68:61:ec:89:8c:0c:11:aa:a1:be:cc:3f:06:37:bf:53:
2f:02:af:25:07:4d:10:f2:c4:20:c4:e9:ea:24:e4:55:07:d6:
d0:25:a3:55:5d:d3:e1:20:b5:4a:83:94:36:bc:e9:9a:37:00:
f8:4f:c8:e5:ec:a1:45:87:48:54:34:5f:d5:7e:2d:75:cb:af:
65:59:13:35:76:eb:61:0b:1e:5c:31:a3:5e:43:e8:29:b9:40:
e1:82:26:9a:8d:5a:96:27:ac:4d:03:1b:4b:2e:e1:6c:94:b4:
a8:82:21:00:ef:2b:9c:0b:a3:0c:46:29:85:5c:58:bb:59:db:
33:01:2d:00:4e:8d:22:a8:ca:6c:1e:6b:c2:cb:c8:03:47:b8:
7e:75:b8:a8:ea:6c:31:9a:bc:4d:b7:c7:85:6e:68:2d:08:4f:
67:aa:88:ae:18:05:52:7c:31:54:b3:5e:b7:25:a6:51:0a:c6:
7c:45:5d:d4:c1:6c:54:69:e1:33:3d:8d:ac:8f:56:a5:52:d0:
f4:93:c4:0a:4d:6d:22:36:a0:1e:4e:89:df:ba:67:34:4e:13:
12:55:db:be:08:83:9f:fb:8d:e0:66:80:98:c7:dc:0a:3b:56:
b2:9b:99:67:83:89:44:ef:fc:02:a3:79:73:3d:55:83:73:30:
18:b2:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:37 2025 by rpki-client on console.sobornost.net