Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa
File: 2bceb09a-8c68-38f7-9325-555d892ae3b0.roa (raw, json)
Hash identifier: IzHHG8qJXTG9gROJ3epl+xmr7eR4f9Y3sZFem3DbaVc=
Subject key identifier: A2:50:C7:97:C4:09:DF:4C:20:2F:31:4D:E0:EB:B3:21:0B:BE:17:F9
Certificate issuer: /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial: 010D0C9F432858497F09A7620CD2244A924B19E0
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa
Signing time: Sat 12 Apr 2025 01:00:48 +0000
ROA not before: Sat 12 Apr 2025 01:00:48 +0000
ROA not after: Fri 11 Jul 2025 01:00:48 +0000
asID: 394453
IP address blocks: 199.253.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7f:09:a7:62:0c:d2:24:4a:92:4b:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Validity
Not Before: Apr 12 01:00:48 2025 GMT
Not After : Jul 11 01:00:48 2025 GMT
Subject: CN=5454ffe3-21df-4205-b5fd-56c55f5e7fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:52:62:ff:b1:44:af:51:25:c7:8e:60:82:
10:b9:19:88:84:07:91:aa:c1:74:ca:7d:31:d1:a6:
21:c6:f0:15:d6:c7:a9:c1:b6:89:7a:47:ad:3a:26:
04:44:c2:98:a8:70:93:91:b1:dc:6d:32:56:c0:af:
ac:b2:4f:11:a2:25:97:17:d6:2c:30:af:5f:19:bc:
50:12:65:a9:33:95:d6:18:f3:d7:36:05:dd:c1:fe:
25:4b:c9:46:8d:82:a0:5c:22:89:5b:b0:66:bc:c1:
dd:4a:5e:b9:05:2a:9d:6a:9c:8f:37:e8:62:2c:62:
30:20:40:6a:53:0d:c4:86:c1:8c:9b:ea:5d:82:17:
14:9e:d1:12:90:1b:95:76:a3:d4:58:d0:35:b8:6f:
2f:29:40:c8:34:37:8a:bf:49:2c:17:25:fb:56:7f:
52:1a:76:13:73:02:d5:d9:54:39:03:dd:8d:d1:b5:
2e:a7:dd:a5:03:60:98:9c:4b:c6:28:68:96:b2:fe:
82:82:52:42:8e:ec:37:65:de:fb:bc:17:cf:07:d8:
e4:f0:23:29:71:98:de:f7:e4:b9:7a:ee:44:96:ec:
7d:99:95:1f:10:e6:6f:19:8b:e7:ee:9e:7c:24:18:
fa:00:91:5a:19:39:ba:09:bd:88:76:90:72:1a:99:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:50:C7:97:C4:09:DF:4C:20:2F:31:4D:E0:EB:B3:21:0B:BE:17:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
X509v3 Authority Key Identifier:
keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
sbgp-ipAddrBlock: critical
IPv4:
199.253.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:bb:88:d8:3d:85:c7:ae:50:20:69:d2:20:62:e8:26:98:31:
73:5a:89:c1:d1:8e:4d:6c:10:d6:1b:6c:f0:97:09:c2:6c:30:
9c:e0:a6:1e:37:f3:c5:c4:53:62:bc:c8:6e:ca:bc:43:ea:a5:
7b:57:18:e9:67:0a:69:a8:41:72:08:3e:ed:c9:5f:96:a5:a3:
25:15:80:62:fc:c8:fd:52:49:9d:42:10:b6:2a:5e:e7:56:2d:
60:c8:f0:3c:db:ba:b4:88:40:9a:5d:fd:56:0f:9f:d8:9a:f6:
8b:06:67:26:12:30:ed:90:e6:17:0e:46:37:64:0c:74:73:89:
e4:da:66:0c:e2:8f:71:fc:d0:dc:2d:f8:f2:71:2e:63:d5:b2:
51:4d:f0:33:57:47:25:0c:6f:ab:07:9a:f7:32:9f:86:15:c8:
a2:20:e0:43:af:4b:fd:92:48:ff:7e:a3:df:5f:09:1d:d9:93:
2c:90:4a:86:24:28:e6:d4:01:2b:59:8a:f9:fc:2a:2c:0b:89:
f2:c1:d6:e1:65:b7:29:8a:eb:ee:f0:a7:4b:3d:1b:a7:0e:20:
77:ad:d2:0d:13:d9:fc:73:7e:1d:ba:fa:8a:aa:f2:2f:f4:e8:
44:50:2e:0a:bb:4d:36:e1:84:0f:43:43:21:a8:bb:c5:26:16:
d1:ec:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:53 2025 by rpki-client on console.sobornost.net