Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa
File: 0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa (raw, json)
Hash identifier: Qii5ZPoDTq0JtPFwEGVQVAVLdRReT8F47WU1D1hoxyA=
Subject key identifier: 31:88:1D:06:3B:F5:AC:31:3F:4E:4E:35:D0:69:6B:D0:B2:F5:25:63
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F432858495529524EF2382DF34EDF51C0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 4540
IP address blocks: 205.236.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:52:4e:f2:38:2d:f3:4e:df:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=ab920f1a-9b7b-410d-a46c-7618331460b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b4:47:4d:9c:e7:26:2c:c2:be:91:7b:e4:b8:
1c:2b:ad:5a:d6:b3:c8:b8:bf:5f:f7:b8:55:88:a7:
25:45:ba:9e:34:b3:2e:e2:18:c6:29:24:eb:6f:a9:
91:f4:15:07:44:37:15:82:5b:50:6e:6e:40:8b:fa:
5b:58:1e:78:20:48:70:fb:ca:5d:d2:94:07:cd:86:
b1:b9:b5:f2:17:15:76:88:3a:92:60:7e:e3:61:59:
6e:78:8a:e8:56:4e:96:ce:31:1d:e0:6d:4f:22:09:
37:bd:f4:37:f3:b9:ca:89:cb:d4:2d:e4:bf:2e:c0:
a9:44:4b:f4:bd:af:c2:aa:35:9e:1e:a0:48:41:53:
2c:a7:80:23:29:a4:24:39:30:d2:c3:00:eb:c9:ea:
2c:d2:92:64:c2:de:09:0d:c4:cc:c6:5e:8c:18:81:
92:50:34:1d:26:d6:5c:22:c5:78:d2:13:f5:d8:d4:
87:f2:18:b1:79:61:5c:cc:e8:70:86:87:35:55:a7:
0b:6e:9c:25:31:96:00:03:a7:dd:a8:10:30:1f:f7:
4f:1c:a0:7e:79:62:65:47:12:46:0d:ac:36:af:af:
bf:fd:e9:4b:c7:a5:d9:a1:05:b8:82:94:8a:1d:cb:
02:0e:d1:f7:db:d7:5c:4a:f2:61:e0:84:ce:96:6b:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:88:1D:06:3B:F5:AC:31:3F:4E:4E:35:D0:69:6B:D0:B2:F5:25:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
205.236.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:a0:0d:0c:65:31:5a:8a:00:3d:8c:0a:51:5a:84:57:ee:f6:
45:48:37:15:66:c4:9c:0b:34:52:4e:f4:a6:e4:45:18:45:d2:
1b:e3:db:9f:7b:43:4c:cf:4f:9b:e1:f9:a5:c2:5e:dd:a4:62:
61:94:74:d7:c2:ec:ee:d0:26:8d:fb:0d:5b:ef:28:b1:e2:f3:
71:ce:71:71:90:2b:86:22:b5:c9:c4:06:17:af:ff:40:58:7f:
ed:4b:c5:ee:6b:97:20:6e:7b:4a:77:36:f2:c3:ca:6f:fe:51:
62:75:28:e2:9b:72:03:33:13:70:1f:3e:0c:61:ac:f7:ec:90:
dd:90:e5:d9:9b:10:55:04:78:89:69:10:3a:89:70:50:f8:a2:
e0:45:81:19:cd:0e:05:eb:f9:e0:5d:85:79:92:bf:d9:91:a0:
c9:99:9a:05:8d:30:33:41:fd:36:ea:a4:e9:06:a2:4a:0c:f9:
1f:e2:07:c2:be:9c:f2:9b:48:02:8f:bc:e1:92:1f:17:dd:7a:
7f:fa:36:b8:5a:e9:3e:5e:c4:05:3c:96:ec:6d:9e:80:68:8b:
13:40:ee:1a:88:cf:52:6d:d9:27:ff:26:70:5a:86:1b:5d:5e:
5b:f3:ff:c3:38:97:bd:b4:19:d0:bd:e6:a1:4e:46:21:68:56:
8e:95:fb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:21 2025 by rpki-client on console.sobornost.net