Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa
File: cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa (raw, json)
Hash identifier: bWaHE37NiJvBG7Fw6Ap2DWRVg6WuK8EADRM59SzhcB8=
Subject key identifier: B1:14:CF:93:FE:FC:BB:63:BF:14:29:32:59:58:98:98:42:76:30:94
Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
Certificate serial: 010D0C9F4328584905B6B23FA6D80DD2F32B8C40
Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 32762
IP address blocks: 198.96.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b2:3f:a6:d8:0d:d2:f3:2b:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=1add4c05-2b1e-40ab-8c0e-0eaa50143507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:aa:11:cf:20:e9:ab:19:af:d5:d4:2c:2f:
9b:5a:8f:09:57:d3:6d:55:21:cb:06:67:a6:75:41:
83:09:64:8f:35:6d:c2:4d:3b:81:46:2c:e9:dc:c1:
0a:44:b5:8a:bb:a3:85:03:25:d9:66:21:c5:43:02:
ed:d7:0a:5d:0c:92:b6:d8:c2:14:87:39:c3:e7:53:
f3:94:83:85:a1:6e:f5:c9:2b:ce:e4:62:c5:8b:81:
9a:1f:7f:13:70:f7:4c:a4:a9:ea:e2:5e:a0:7a:ae:
c2:b4:ee:d3:88:3b:37:68:ae:1f:e9:b6:42:44:46:
33:76:3c:e5:4b:ef:df:fe:bd:31:61:47:cc:4a:a5:
00:81:c9:12:ad:6b:e5:86:85:d8:8c:88:53:4b:9a:
63:36:21:49:58:30:26:af:05:06:d3:f5:9f:88:52:
70:06:ba:81:85:ab:dc:3b:3c:78:5e:de:4b:04:63:
03:57:16:9f:d3:e1:82:fa:1b:a0:25:db:b2:28:40:
36:2c:63:ce:e9:57:15:03:9a:5e:51:0c:cb:e8:d8:
3a:8f:f0:66:3e:43:9a:49:cc:49:db:a4:cd:45:56:
0a:cd:e0:e3:26:2b:45:d7:be:e6:70:91:52:24:7e:
7d:0e:66:ab:10:01:5f:6b:ac:53:44:b2:ad:7a:e2:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:14:CF:93:FE:FC:BB:63:BF:14:29:32:59:58:98:98:42:76:30:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/cb2fdef3-69d3-33f1-a276-0ebf0c220d49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl
X509v3 Authority Key Identifier:
keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer
sbgp-ipAddrBlock: critical
IPv4:
198.96.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:ce:4c:cb:2e:73:a0:f5:fb:13:f0:6a:f1:6c:db:98:9b:b6:
2b:fb:5a:08:ff:30:a6:0c:e0:92:4f:65:1c:f2:51:2d:a7:c6:
ec:95:fd:ae:fb:ad:e4:a0:12:a5:19:5e:82:0a:47:bf:01:e5:
e2:e2:75:fe:9d:49:00:61:66:21:3f:d2:d2:34:6f:d2:bc:36:
d8:4e:20:5e:18:eb:5c:3d:fd:4d:0d:f5:a2:2a:4b:fd:a5:7c:
4a:fb:6b:88:41:7b:3f:69:f4:e1:d8:07:35:97:29:33:0f:ac:
3c:8c:f1:3a:34:93:ed:96:94:63:47:8a:2f:29:c8:6e:fc:42:
cc:ed:53:d6:cc:37:18:88:9c:a3:39:8f:0c:33:ec:c7:e7:46:
e1:49:97:17:82:32:34:a3:63:68:47:ca:1d:5b:91:d9:d1:db:
44:c2:46:46:0a:0c:c0:89:5d:ea:72:3d:16:a1:4e:52:8d:ce:
f4:1d:33:b0:96:64:2f:05:21:55:24:fe:c4:3f:53:d8:b9:3b:
5e:20:15:57:db:01:e3:82:a1:85:93:f7:f6:11:05:4c:ec:fb:
e0:09:eb:8b:67:a9:52:20:7b:f4:02:c1:97:9e:40:b6:f9:e4:
48:d3:e6:86:5e:9d:81:68:44:82:c0:de:95:c8:2b:69:98:c1:
e7:ca:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:16 2025 by rpki-client on console.sobornost.net