Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa
File: 7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa (raw, json)
Hash identifier: 4OxqZPnBcUlrxSHkWxbzBnb010JQYIxoYy7Qix8lpP0=
Subject key identifier: 6C:6A:84:A9:A2:93:AF:7B:09:F9:95:E8:07:55:7B:DF:21:A2:D9:4F
Certificate issuer: /CN=3228caa5-d014-404b-9e3d-61cdea1ff493
Certificate serial: 010D0C9F4328584965E9787D56C46B433B241800
Authority key identifier: 61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa
Signing time: Thu 03 Apr 2025 01:00:46 +0000
ROA not before: Thu 03 Apr 2025 01:00:46 +0000
ROA not after: Wed 02 Jul 2025 01:00:46 +0000
asID: 401438
IP address blocks: 198.200.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:65:e9:78:7d:56:c4:6b:43:3b:24:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3228caa5-d014-404b-9e3d-61cdea1ff493
Validity
Not Before: Apr 3 01:00:46 2025 GMT
Not After : Jul 2 01:00:46 2025 GMT
Subject: CN=6b9edc25-5820-4428-87c6-beedb8d6685f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:60:1d:6c:95:59:cb:46:f0:e5:e5:5d:aa:
1e:70:8b:58:3a:61:fc:d5:2f:6e:1c:c9:33:af:dc:
72:92:27:a7:cc:8a:fd:b5:83:80:e4:28:ce:05:21:
90:bc:79:29:74:e9:92:0b:c0:8c:33:d6:b7:61:7d:
21:72:84:63:c0:0c:cd:eb:2d:23:75:18:a1:98:57:
51:7d:14:2a:cc:55:67:db:97:a0:6c:fe:ab:39:93:
da:8d:77:92:db:f4:d0:b7:11:67:2f:5a:16:67:9c:
e6:e1:f6:e0:55:8e:2f:c5:b6:19:14:d4:6b:8f:ce:
43:fe:d4:d0:74:70:2d:01:c7:d2:8a:24:c7:1b:f0:
36:ce:6d:d8:97:33:93:99:4b:45:f5:a1:1f:26:6a:
aa:a2:93:df:b0:3a:57:06:21:e2:9b:17:52:b0:4a:
4c:2f:56:e4:38:a2:66:f7:2c:76:7b:9b:65:a7:8c:
ad:5e:aa:9f:a0:d4:b6:bb:f4:07:3c:fe:68:33:10:
9a:bd:5c:50:b6:0f:00:73:8f:f2:3b:5b:fa:8c:e1:
02:d4:b5:5a:a5:59:49:87:33:c3:bf:c8:ea:10:38:
0e:79:5f:98:04:91:1a:7d:e1:bd:00:68:93:69:13:
58:9c:4a:77:a3:5f:93:73:d2:e5:cd:75:0c:09:62:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6A:84:A9:A2:93:AF:7B:09:F9:95:E8:07:55:7B:DF:21:A2:D9:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl
X509v3 Authority Key Identifier:
keyid:61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer
sbgp-ipAddrBlock: critical
IPv4:
198.200.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:4a:6e:76:4f:1d:f5:30:e2:55:bd:13:84:00:9f:56:8e:54:
de:6f:81:27:df:08:c3:d4:76:27:38:5c:66:da:52:dc:b8:bb:
c3:9f:79:6a:4a:59:a9:cb:99:3f:86:ef:f6:d1:b9:45:bf:5f:
7c:73:de:ac:38:ba:a1:56:7c:17:f7:fc:94:4d:d8:d1:af:9b:
71:9e:3d:93:88:b0:85:0f:76:9d:b8:dd:c4:3b:ae:41:dc:8e:
fe:95:95:73:c5:c2:4b:c1:1e:ae:9a:ba:cb:dd:89:bc:4e:22:
48:73:c4:a1:90:46:e8:36:ed:5f:39:33:e3:98:90:6f:36:07:
7b:13:69:54:da:32:2a:62:f1:2c:98:cd:ff:f7:8c:43:83:32:
45:68:d4:40:2c:0d:c5:da:8e:b5:56:ee:7f:d7:80:69:51:41:
01:86:d5:20:15:a8:3f:ef:7e:90:21:69:24:40:f7:f9:ea:89:
4a:e0:9c:93:c1:35:a4:ac:b8:48:2a:e6:b6:60:83:32:06:2c:
ee:ee:4b:2f:eb:1d:2b:71:5f:71:af:48:af:ae:f9:ba:23:19:
8a:e4:56:38:d4:fb:98:20:f4:e4:e1:80:8a:5a:d3:58:11:b2:
ac:5f:ae:2b:ab:12:b3:af:11:46:45:60:ca:c0:bd:cd:8f:a9:
f5:c9:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net