Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
File: cfbac226-9694-3b77-98b0-76526b389042.roa (raw, json)
Hash identifier: f+h+rSsj+q3OmBkrBHQ8u63SupO8cOcXJt1JuVeFC7A=
Subject key identifier: ED:85:7B:DB:0E:8D:3A:E1:B5:21:53:02:B9:42:55:B3:7D:C6:66:E0
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F432858496A19A9557C2B2FDD49C06110
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 25697
IP address blocks: 209.151.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:a9:55:7c:2b:2f:dd:49:c0:61:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=0f9e6bc2-9b86-4f9a-8891-6e3c11418fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:96:95:71:ba:51:d4:cf:4c:57:42:43:6a:
27:60:82:f4:86:29:43:d4:62:34:70:3a:23:01:77:
ee:33:83:b7:a5:b5:fe:7e:22:a5:b4:b0:a8:ca:e6:
ce:6d:8c:ef:5b:aa:63:2b:74:1f:6f:94:4f:d0:67:
55:47:a9:13:e4:70:90:ae:71:43:11:72:8f:d7:e3:
4b:af:1b:12:c4:78:37:8a:e9:1b:a0:bf:c0:63:12:
b2:a6:bb:38:7b:f1:1d:21:60:e9:b1:4a:cf:b5:66:
bd:0e:2d:bb:74:11:d8:2d:b7:67:0e:43:fb:04:39:
1e:26:97:a1:07:9c:67:a6:f7:4b:d4:50:78:dd:8a:
50:fb:6e:96:88:ee:c7:e1:0d:6f:9e:5b:d5:aa:ae:
da:c1:70:db:82:86:6e:25:95:ac:e8:59:20:d6:cd:
01:a3:fb:ef:10:09:dd:70:4b:51:65:87:09:e4:78:
1a:6f:fc:18:7d:1c:03:d9:57:6f:3c:e2:eb:47:f2:
dd:34:de:3b:5c:d3:29:ef:78:0c:a5:61:77:51:b2:
4e:7b:59:6d:a3:e3:14:53:6a:d3:f9:a0:0d:ef:10:
a9:b5:01:15:51:68:5d:13:df:82:bf:23:9a:05:ca:
35:7f:1b:9a:ca:a7:96:40:a2:ff:c5:49:fd:89:da:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:85:7B:DB:0E:8D:3A:E1:B5:21:53:02:B9:42:55:B3:7D:C6:66:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:ee:56:22:73:80:b7:34:9b:91:11:a1:38:a4:9f:d5:75:33:
6a:9e:5c:8a:1f:ff:64:f9:91:2d:6d:b2:00:8b:fd:d2:fd:72:
c3:0b:45:0d:88:4b:c3:31:db:ae:53:a4:9e:28:de:4a:7a:e5:
9d:62:2f:12:92:2a:9f:15:f6:bf:c8:ec:ec:4a:bc:a2:4a:cb:
16:b4:fa:a2:f2:91:24:c6:24:7c:36:63:36:e8:9f:ff:89:58:
67:55:33:bc:2c:ca:22:70:76:1a:b7:e0:20:da:7b:a1:d5:ec:
bb:ac:d9:fe:24:f2:bc:cf:98:dc:37:e1:8d:92:62:fe:22:f8:
75:13:fd:e4:a5:69:8a:95:83:cf:ee:8c:20:dd:43:09:6d:ff:
61:81:a8:f1:64:42:7c:a4:0a:22:c0:ca:19:24:3a:45:3f:ed:
74:64:e5:86:98:7b:a2:6d:73:94:b5:38:28:37:94:3c:b8:43:
3a:28:0b:ab:2a:e7:a9:d8:34:ca:9d:41:d0:7a:32:43:7b:98:
96:40:0d:2d:2c:e0:cc:05:c1:94:f0:5e:95:e8:01:33:4b:ee:
2e:9f:ce:78:a2:a2:77:d1:ec:81:af:72:41:22:c5:03:ad:fb:
7a:8d:0a:ac:8d:0d:ac:dd:24:64:28:f0:63:ee:c4:89:93:d0:
0f:fb:14:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net