Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa
File: b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa (raw, json)
Hash identifier: /gJWqB+S10GldL9fpBE/sHoDJH1O/Mh16d8MMVIhEos=
Subject key identifier: 2E:9E:D2:D0:80:EB:E5:3E:74:86:5E:8E:69:DF:CB:EA:49:A4:0C:4C
Certificate issuer: /CN=3bfea78e-552c-46d0-a7b4-60f999223238
Certificate serial: 010D0C9F432858495ABEE20F262E0CF196F06A80
Authority key identifier: D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 47027
IP address blocks: 165.140.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:e2:0f:26:2e:0c:f1:96:f0:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfea78e-552c-46d0-a7b4-60f999223238
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=ac5f63b3-71be-4818-9b24-b2b56ba5b792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:a3:df:26:6b:84:0b:43:c7:d8:ff:73:c1:
58:b2:e9:b5:53:a0:aa:d6:83:d2:74:e0:02:ec:72:
fb:ae:81:ef:e0:00:2d:0f:89:75:7e:a0:39:8f:dd:
df:3f:9f:76:b1:f4:50:5c:18:1c:2e:f5:c4:59:24:
2c:1e:7e:d6:1e:4e:46:1b:14:3d:7f:fd:3a:50:e6:
02:26:24:ca:0a:7b:75:c8:05:15:1b:a5:43:d8:8a:
06:fc:ca:88:27:80:96:f4:1d:11:2c:b1:bf:94:77:
50:18:e8:92:b7:f9:4f:bf:5d:9c:5c:60:1d:23:05:
f6:51:94:12:11:4e:c3:b1:31:24:72:c5:ee:33:16:
47:50:76:63:9a:0d:22:99:c5:4a:62:7a:75:66:26:
7f:de:44:3f:5b:83:33:a1:f0:b8:48:ff:5d:61:fc:
99:ce:a5:11:10:4c:9f:c7:8f:38:e6:23:4b:67:5b:
0f:ad:26:05:22:2a:e1:e7:a6:f2:f9:e5:13:0d:ff:
20:14:60:93:1c:87:cb:68:e4:1f:e4:05:22:5c:04:
21:da:ac:67:b9:bf:1f:0f:12:df:09:ea:8b:33:a6:
bc:6e:7b:41:7c:d5:10:74:0b:b7:ca:9e:c4:3c:2b:
25:01:25:52:73:7b:94:85:be:0a:a5:77:01:7f:8b:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9E:D2:D0:80:EB:E5:3E:74:86:5E:8E:69:DF:CB:EA:49:A4:0C:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl
X509v3 Authority Key Identifier:
keyid:D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e4:3e:e5:3a:25:a9:1a:dc:27:4f:24:a2:4d:c5:0f:e7:73:b5:
e8:1c:84:14:b9:f1:ae:76:a2:eb:70:35:9e:6d:a2:ca:44:46:
89:8a:6e:9b:e1:d0:96:b6:66:6c:fe:8e:3a:5e:88:fa:ad:81:
e9:e6:a5:99:64:07:d6:fc:9d:11:49:ec:2d:04:7d:a5:d6:70:
39:35:30:5e:33:67:cd:94:15:6c:ca:ee:22:76:89:65:7b:7c:
1f:6d:8b:66:7e:07:84:c0:e8:82:d8:18:a8:e2:1f:b6:22:f4:
93:47:84:f3:5a:b5:20:1e:61:66:ea:3f:ee:c2:61:87:a6:7c:
db:af:0b:ab:09:d7:8a:c0:4d:d7:c7:72:dd:9f:13:8f:7f:23:
80:eb:a0:36:25:47:6d:5c:9a:35:73:33:f5:b9:7e:bb:fc:ed:
e9:e9:ec:a6:34:04:ee:38:d0:4d:02:05:10:bd:fc:b0:7c:0f:
69:b5:c1:fe:05:d4:10:3d:0a:dc:5c:af:e1:62:76:ba:f6:32:
ed:60:47:bb:1c:db:ef:be:18:8b:6d:b9:9c:cb:38:c2:81:2d:
44:10:1d:8d:db:59:df:38:85:fc:f9:62:3a:8e:dc:20:24:62:
e3:5e:e4:40:f1:fc:5b:16:5f:44:f8:4d:73:54:a4:fd:7d:a8:
4a:2d:64:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:15 2025 by rpki-client on console.sobornost.net