Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
File: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (raw, json)
Hash identifier: twbxRuqvpVynaX1Co8ImU6+f7vjL9nuWB0Zv0pj+z84=
Subject key identifier: 04:27:A0:5C:C8:A7:65:0E:D1:74:5B:F6:4A:5A:25:34:69:9A:9A:97
Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Certificate serial: 010D0C9F432858496FAF10228E637325A0F5BF80
Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 2902
IP address blocks: 198.59.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:10:22:8e:63:73:25:a0:f5:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=03813e82-24e0-4fea-86bb-bcaf09403852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:2f:33:c4:d0:55:32:55:17:5f:17:8f:76:
11:9e:55:e7:f3:29:d2:06:14:68:2f:9b:65:3f:23:
8a:bd:5d:bb:a3:f2:3f:dc:c6:df:2d:4c:3f:34:f9:
c0:c1:b2:f4:ac:94:8b:de:eb:4f:29:e7:ea:a1:09:
9a:bb:37:96:02:44:11:b7:48:f6:34:05:1b:94:69:
8a:50:62:b5:39:c7:ca:95:17:e4:96:8f:e0:41:0b:
a7:23:c2:35:45:d1:c5:31:41:0a:01:ca:55:77:a2:
95:2c:56:58:50:0a:85:db:de:cd:ea:a3:4f:ae:99:
90:6b:89:0d:cf:34:7a:97:03:50:81:d4:1e:17:d2:
87:36:a3:ba:78:3c:b6:b2:df:1c:7e:ae:bf:7a:ba:
94:9a:02:cf:8a:86:f9:6f:95:13:d4:f3:f6:62:72:
7e:23:ad:74:21:44:ba:0d:c7:7b:27:4f:c9:70:80:
b4:11:25:23:09:53:bf:ea:1f:1f:75:69:21:2f:ea:
25:ce:21:eb:fc:d7:dd:10:11:d0:88:de:5a:3a:5e:
fd:b3:d3:d4:88:c9:b8:49:d6:f5:aa:52:3b:da:93:
c1:2d:06:60:28:c0:9f:37:75:69:02:2a:7d:6f:26:
b6:8d:59:ab:92:ae:0e:a1:07:b5:31:8f:5a:66:8c:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:27:A0:5C:C8:A7:65:0E:D1:74:5B:F6:4A:5A:25:34:69:9A:9A:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl
X509v3 Authority Key Identifier:
keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
sbgp-ipAddrBlock: critical
IPv4:
198.59.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:08:36:ee:6f:a0:fd:68:d5:80:ee:2b:64:f4:c8:26:7b:1f:
e8:65:78:03:88:b7:e9:a7:b0:41:71:a3:17:b2:22:9f:90:96:
cf:ca:ab:3f:12:a7:29:13:8f:16:d5:de:e6:a6:3b:0a:79:ad:
5c:2e:c6:81:d7:56:ae:5f:c7:b5:87:8a:c5:91:69:53:4f:52:
18:49:d4:60:ec:18:0e:4e:6a:68:ca:ce:4f:ca:40:e1:07:a6:
52:32:01:53:f8:bc:f0:5e:06:7a:e8:87:e8:b2:1f:6f:5e:7f:
8b:cb:77:0d:a2:53:f4:8b:5f:5a:7c:4c:78:59:ba:80:84:1b:
d7:9d:43:8d:c0:b4:09:5f:13:26:d4:38:e3:c4:90:1f:ee:7f:
7b:6f:50:e1:7a:d2:55:4a:eb:6a:bd:c3:6b:b2:49:41:c3:e9:
b4:b9:bc:6d:10:cf:e7:d7:df:59:74:11:ce:70:d4:c5:a6:05:
29:30:3b:8e:bc:19:10:2f:a2:1f:aa:ac:16:5a:64:92:1a:0c:
23:a2:8d:c9:7b:6a:ef:52:6b:a2:6e:7f:83:71:73:ce:bd:9d:
ad:5d:53:12:5f:b9:ca:5b:28:c1:f2:e2:36:94:d9:a6:6e:f5:
6e:33:d9:24:18:b5:c2:93:15:73:4f:f1:42:5a:2b:33:f2:63:
68:b3:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:56 2025 by rpki-client on console.sobornost.net