Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa
File: 3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa (raw, json)
Hash identifier: XTaG+8tFsrIqSwgK0Cxv8BXEDWtTnZHFaiZjtXYFi8A=
Subject key identifier: 29:30:CF:91:BA:7B:BC:4D:53:47:51:78:9E:9E:48:1A:7C:EF:F9:4D
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F4328584961B995A9C16D9FA771BFCC44
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 12083
IP address blocks: 24.214.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:95:a9:c1:6d:9f:a7:71:bf:cc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=36c937db-0d55-4035-a050-1c046ff06319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:ff:f7:ce:0c:33:d2:91:b8:5a:ec:5e:ac:
b5:b5:8c:81:e9:b5:f1:d2:75:ad:45:47:9f:77:61:
56:b0:8d:71:96:0f:86:3d:2c:c9:93:9f:83:85:7c:
49:39:6c:3b:d4:22:02:20:6e:bb:a5:ff:28:03:11:
65:17:58:d2:29:6a:e0:26:dd:e8:00:0a:dc:b4:5e:
56:24:52:ca:43:bb:d7:6a:02:03:a7:0d:28:5a:57:
eb:ed:16:81:e2:a1:fb:d5:3c:a5:5a:3b:21:3c:c2:
77:c9:91:80:3a:e0:21:e9:52:ea:dd:78:e7:da:2d:
04:ca:ac:36:a0:d4:fc:8f:86:ea:2e:2b:48:b1:f7:
b1:a6:5f:a5:5c:92:10:99:81:23:cb:6e:09:72:1e:
46:4f:54:53:95:84:6d:39:eb:c6:7a:b8:43:24:4e:
94:60:2b:53:03:a7:61:e2:74:ed:d1:27:d5:3e:74:
89:a7:ae:f9:62:5d:7a:dd:06:a4:b4:78:09:66:56:
1b:7c:c2:96:02:ee:61:b2:a4:09:65:58:8d:44:6a:
d7:01:a4:77:84:d6:2b:1d:72:d9:e9:4c:b0:51:a6:
44:d1:ff:79:f4:5b:ed:23:7d:7f:7f:b1:30:a8:e5:
e4:27:12:cd:07:cc:21:e8:9a:ae:bf:ce:18:1c:a4:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:30:CF:91:BA:7B:BC:4D:53:47:51:78:9E:9E:48:1A:7C:EF:F9:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3f7ade2c-2b0c-397f-8ad1-a6d09b774e0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
24.214.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:b4:b3:72:fc:fc:73:ff:3f:7e:e8:b6:d8:f4:1f:47:5f:95:
ac:6b:c5:08:5a:da:da:a8:ba:7d:b8:b7:1d:a4:0b:72:12:83:
3c:cc:ee:be:04:51:ac:5a:1b:b7:83:2c:5d:53:7b:9f:fe:3f:
08:5a:f5:67:7d:03:b3:c5:27:15:c3:c6:6b:4e:9b:c6:21:64:
56:b1:50:ef:08:1a:3c:ba:39:4a:89:70:3b:8d:48:b1:1c:6f:
72:91:65:dc:5a:72:20:e3:17:29:e7:28:7f:e6:33:41:16:68:
a5:7d:3d:91:25:67:72:81:5d:e2:cc:df:5c:5d:af:c6:5c:8d:
83:a4:7c:5e:f4:42:be:4a:c6:de:22:cd:12:be:4d:f3:8e:96:
3c:5f:c8:61:ed:69:d9:fc:78:4a:a1:36:9e:fe:8d:b2:1b:1d:
59:72:65:1c:b3:cc:0f:a5:88:59:6b:31:a4:f9:b4:40:2a:b1:
12:dd:98:25:ff:6a:be:7f:8c:0e:de:f5:f6:8a:9b:36:7e:f0:
e2:80:c7:7f:f1:55:d1:a4:62:92:e3:be:3d:55:3d:dc:56:b0:
fc:c8:dd:17:9d:4e:8e:d5:a5:f5:ca:29:f5:c4:43:c6:02:f4:
45:31:d3:9e:26:e3:a7:b7:a7:8c:cb:36:bf:98:7d:cc:0a:4e:
6c:9c:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:56 2025 by rpki-client on console.sobornost.net