Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/353d57dd-8746-3f46-856b-63fd1488aeae.roa
File: 353d57dd-8746-3f46-856b-63fd1488aeae.roa (raw, json)
Hash identifier: Yta/4naus+pQtV+BEcufZUuXti+f+8n8kiJghl2ZTUY=
Subject key identifier: FE:82:6D:82:72:90:62:28:C9:52:48:0B:97:C8:A1:59:8A:13:FB:0B
Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9
Certificate serial: 010D0C9F432858494733E66CBCC2CD952DD09780
Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/353d57dd-8746-3f46-856b-63fd1488aeae.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 12261
IP address blocks: 173.242.240.0/22 maxlen: 22
173.242.244.0/22 maxlen: 22
173.242.248.0/22 maxlen: 22
173.242.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:e6:6c:bc:c2:cd:95:2d:d0:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=0d378812-e461-45df-a56f-5e05e95ddec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d0:ba:5b:ad:99:46:d9:f9:c5:2b:e5:f4:49:
dc:dd:6c:85:ca:93:22:d5:2d:c4:2d:cf:b2:4c:49:
d4:5c:35:0b:13:a6:c5:bb:81:b5:ee:ec:0a:4a:93:
42:b3:9a:51:64:36:b3:e5:50:bb:8e:e0:19:07:6e:
2d:21:d1:5b:0c:0e:58:28:61:c8:9b:49:a6:ae:fb:
ed:38:89:75:1b:84:f6:b9:65:87:33:ea:a2:8f:06:
c5:3f:4e:80:12:48:f3:2f:6b:37:bb:84:6f:ec:4a:
9d:a5:96:c8:25:c1:c8:07:1a:1b:85:1e:ca:cc:12:
b8:d2:bf:a0:3d:5a:0b:06:03:d0:59:04:4a:6e:43:
8f:e9:8c:ad:ab:c2:6f:bb:34:59:df:df:49:95:21:
21:8c:14:35:fb:1e:56:93:19:c8:7a:e5:9f:ad:6f:
c7:8e:e0:d7:b7:ba:9c:64:e3:f6:46:f3:50:9a:59:
a4:c1:f9:f7:4f:8f:36:cf:a8:7b:d8:2b:93:ac:7a:
d4:f6:4b:7d:c4:d9:2d:14:8d:e3:09:12:11:b4:6b:
00:36:d4:25:bb:d6:d6:f3:34:bb:11:2a:f1:e6:25:
5c:b0:bc:09:4d:74:fa:23:ef:ed:19:e3:a0:6c:29:
52:32:ba:d0:2e:18:85:7e:34:8a:db:cd:32:f8:78:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:6D:82:72:90:62:28:C9:52:48:0B:97:C8:A1:59:8A:13:FB:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/353d57dd-8746-3f46-856b-63fd1488aeae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl
X509v3 Authority Key Identifier:
keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.242.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:68:68:c4:f2:4c:04:fb:a1:51:69:20:c2:0f:f9:2d:5f:cc:
9b:ff:4c:45:91:c0:73:8a:76:19:18:34:5a:dc:91:61:25:88:
00:3b:66:1b:bd:16:36:e7:9c:e0:91:1b:37:03:07:46:63:56:
ce:a0:e6:fd:9a:8f:d8:2f:0a:c6:e8:04:14:e4:eb:db:09:d1:
57:89:14:96:2e:68:36:ac:98:a9:b8:39:f9:c9:04:e6:78:cf:
61:5d:77:17:40:2f:fd:c4:3b:40:3d:b6:d4:78:08:52:f8:f4:
6f:b3:10:81:05:f6:9c:4a:bf:cb:d0:c4:ce:f2:be:d7:65:60:
cf:2a:f7:ee:e0:5e:29:2d:fe:35:11:88:31:1c:a7:83:7d:92:
14:51:df:81:d4:07:c5:61:d3:7e:63:e6:32:24:1b:26:61:db:
72:69:31:b2:52:7e:c2:84:de:ce:37:b0:f2:6f:b6:79:17:a2:
fa:85:57:b0:30:1b:01:23:75:79:78:88:b4:4c:5b:2d:0c:34:
60:a2:03:0e:b6:9f:6b:d4:c7:45:38:ef:ec:0e:d6:68:33:a9:
61:f3:ae:5b:41:8b:2f:c7:0e:82:53:a5:ab:2b:f5:69:3b:5d:
24:a6:da:d5:3f:36:f2:58:78:b5:a7:2d:42:4d:01:6d:78:4e:
9a:85:6d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:48 2025 by rpki-client on console.sobornost.net