Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/4ae893bd-15be-3bc8-a0e3-b3442e270b99.roa
File: 4ae893bd-15be-3bc8-a0e3-b3442e270b99.roa (raw, json)
Hash identifier: 7UciH0nDSVXM8gweMEuGtGU6O6DWbqd3av0z4s8TmHA=
Subject key identifier: E6:B6:86:11:53:14:A4:59:1A:71:AF:DE:35:6E:B8:9A:23:FD:69:BB
Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial: 010D0C9F432858497114342518873DAF21B9B480
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/4ae893bd-15be-3bc8-a0e3-b3442e270b99.roa
Signing time: Mon 07 Apr 2025 01:00:47 +0000
ROA not before: Mon 07 Apr 2025 01:00:47 +0000
ROA not after: Sun 06 Jul 2025 01:00:47 +0000
asID: 16509
IP address blocks: 206.146.138.0/24 maxlen: 24
206.146.139.0/24 maxlen: 24
206.146.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:14:34:25:18:87:3d:af:21:b9:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Validity
Not Before: Apr 7 01:00:47 2025 GMT
Not After : Jul 6 01:00:47 2025 GMT
Subject: CN=d20e8052-47e8-4ede-b211-f516202723aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:64:36:87:1a:25:bf:e0:6b:ad:ca:4e:01:
ef:13:f1:f5:e2:b7:85:cf:40:04:36:a3:01:74:b9:
a8:25:4e:5e:55:ab:a0:e1:25:85:4e:63:18:74:99:
72:98:d6:c3:7d:c0:94:23:a6:61:b9:6f:f2:a1:73:
2f:30:33:79:c8:82:72:34:46:f4:d8:97:a0:28:91:
49:57:a7:fc:fb:dd:34:44:a6:9f:25:23:6e:0f:5f:
2d:c8:88:c7:4d:c0:38:e0:1f:d1:cc:cd:d3:3b:d1:
d2:92:5e:35:06:0e:2a:6c:cc:41:c5:64:8b:c9:6a:
f1:e1:38:67:5e:78:89:e3:ff:79:c7:65:cd:f5:47:
54:33:ac:cb:07:b9:c1:eb:9e:39:b0:19:6b:52:64:
c4:e6:98:74:be:e0:44:79:af:97:03:c9:68:bf:71:
c3:ad:98:55:69:e0:80:c6:d0:1a:65:66:75:41:ce:
de:06:b1:92:4f:ef:39:a6:1c:f7:35:ed:69:bd:d2:
68:f7:2b:26:a8:d1:6d:52:b2:4c:12:ec:89:a4:25:
2c:31:c6:17:c1:4b:7f:15:52:90:28:bf:50:70:ca:
19:59:9f:70:a0:1c:89:45:fb:c9:cd:8e:7d:a1:e8:
e3:e0:d2:7d:94:44:f0:6a:b7:12:04:a9:ae:eb:4a:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B6:86:11:53:14:A4:59:1A:71:AF:DE:35:6E:B8:9A:23:FD:69:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/4ae893bd-15be-3bc8-a0e3-b3442e270b99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
X509v3 Authority Key Identifier:
keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.146.138.0/23
206.146.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:96:66:a9:2d:f0:fa:a2:8c:16:22:8d:fe:da:7c:05:d9:f4:
ec:a7:26:d4:90:2a:a1:43:5d:4c:6b:33:a6:09:3c:e2:b4:44:
2c:91:4e:b2:2a:4f:07:f0:98:50:d3:8d:ba:eb:5e:32:bb:f0:
39:40:d3:ea:ef:31:82:cc:95:c5:f1:3e:7b:7f:81:00:5f:82:
b4:83:8f:ce:12:2b:79:34:ef:6c:9a:c3:31:34:f1:96:5d:3d:
23:cc:ff:67:c2:cd:cc:31:a8:08:a3:85:aa:cc:7d:d1:66:49:
d0:80:e2:14:f2:12:a0:b6:e0:f7:a2:68:48:fa:98:d6:07:2c:
54:ae:e8:f7:e9:c8:3e:19:bc:3c:97:a3:72:98:59:9e:2a:a0:
e8:73:86:c2:d9:98:e4:98:ae:d0:0f:c7:14:5d:fd:c6:89:8c:
36:a5:a5:23:a5:f3:65:0d:c0:06:73:3a:ba:47:94:6f:bf:42:
08:98:4f:d3:be:d2:98:15:9d:6b:19:a2:1b:f3:42:63:78:97:
40:86:72:33:dd:10:73:d2:96:b9:3a:ba:49:5b:e8:b4:0c:60:
3f:fe:0d:6d:bd:56:67:66:c1:c9:0d:78:b4:a6:a5:45:00:dd:
f1:55:33:4e:ca:89:7c:70:37:ed:04:cd:26:86:67:e3:7e:ea:
25:c1:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:37 2025 by rpki-client on console.sobornost.net