Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/b4650fb5-7679-338a-8f55-9496e081bd1c.roa
File: b4650fb5-7679-338a-8f55-9496e081bd1c.roa (raw, json)
Hash identifier: NpBvXv9zmU/4XSkSmle25H4W0CrX+mjMLrqTSVPDfs8=
Subject key identifier: 01:D2:0C:91:AB:45:14:B4:01:D2:8C:4E:A3:56:B0:83:91:4D:3E:80
Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial: 010D0C9F432858495EEEF006EDBB26C36B28AC80
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/b4650fb5-7679-338a-8f55-9496e081bd1c.roa
Signing time: Mon 31 Mar 2025 13:00:59 +0000
ROA not before: Mon 31 Mar 2025 13:00:59 +0000
ROA not after: Sun 29 Jun 2025 13:00:59 +0000
asID: 16509
IP address blocks: 162.212.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:ee:f0:06:ed:bb:26:c3:6b:28:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Validity
Not Before: Mar 31 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=bd27273d-7daf-48b2-8035-2fef5f833517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f1:d6:a8:59:4a:81:dc:43:ba:a8:eb:f9:7e:
ac:2c:d5:af:7d:01:51:6d:a0:b1:c1:73:79:3a:6e:
01:0b:f5:7b:17:45:2e:3b:6d:7f:da:45:df:4d:f1:
b8:bd:98:5f:6d:6b:7f:cc:99:4e:09:a5:ca:cb:50:
1f:39:51:9e:3e:af:e0:23:98:24:4d:75:3f:da:cc:
13:2f:52:c0:32:48:f3:22:03:44:57:35:d2:0c:59:
10:a6:39:47:30:db:e6:f9:82:90:ef:62:78:b6:57:
10:9e:86:45:ef:1f:fe:07:3d:4c:2e:7b:00:c4:3c:
32:f6:3f:3f:95:7d:03:5b:94:20:e3:06:8d:24:38:
60:ae:d3:a9:e8:a9:c4:40:a1:f1:cb:63:f9:cd:dd:
95:06:c3:20:ba:80:31:34:94:58:04:35:ab:ba:b0:
f9:ae:83:76:ec:7e:94:22:c9:de:ec:11:33:a3:cf:
46:ab:b3:59:a8:7c:5d:c1:2c:e1:6d:25:ef:23:01:
61:2c:52:96:d1:69:fa:27:a3:3c:4e:1f:95:ff:d5:
95:a2:62:46:7f:7e:20:b6:70:fd:8d:5a:21:c3:22:
57:6f:a9:85:a8:53:39:98:5d:1c:61:37:69:61:3b:
c4:e4:48:97:28:a1:31:9b:31:0a:22:d5:da:40:cd:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D2:0C:91:AB:45:14:B4:01:D2:8C:4E:A3:56:B0:83:91:4D:3E:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/b4650fb5-7679-338a-8f55-9496e081bd1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
X509v3 Authority Key Identifier:
keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
sbgp-ipAddrBlock: critical
IPv4:
162.212.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:35:13:37:76:4e:94:7b:e5:c2:e0:be:4a:f6:28:da:27:f0:
10:59:8c:99:87:a6:7b:6c:c0:06:16:e2:99:29:54:4d:1c:0d:
32:0c:dc:4e:a4:cd:ab:70:3d:74:02:0b:05:4a:00:bf:89:89:
9d:75:00:ed:08:80:e4:09:42:37:7e:22:bf:44:12:5d:72:56:
19:91:e5:ec:83:a3:f6:56:65:cf:77:01:b1:93:90:b6:b2:79:
d3:52:5b:a1:32:07:bd:1a:21:db:99:e3:9d:3a:eb:c1:fa:bb:
2e:e0:9c:a0:fc:63:4a:22:c1:e9:9d:0a:51:61:e2:34:84:ab:
09:ac:e6:aa:3c:fe:b1:e3:5d:d7:be:2f:a8:ff:68:09:77:69:
50:6e:f5:b2:ec:71:96:92:07:fa:b9:cf:a5:32:2a:3a:0f:13:
15:5e:61:0d:0e:06:99:f3:a4:3e:be:48:db:f6:5a:7f:0d:b5:
fb:a4:0c:fb:9d:1a:cd:44:72:10:a3:0f:79:f8:e0:91:7c:75:
09:96:a0:a9:7b:c8:e7:20:2b:21:5c:b0:0d:48:5b:d9:8e:4a:
4a:b7:d8:66:b9:83:69:17:9f:f3:0a:01:a5:d3:04:b6:1e:88:
71:c1:3b:d8:68:af:a1:43:4a:90:be:d0:7c:04:88:29:40:d1:
9d:f9:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net