Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa
File: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (raw, json)
Hash identifier: nf8vSxCOQhKc+pDQ1KA0Ce7XqkUz6/mfE6qBhn8nkvA=
Subject key identifier: 63:04:89:17:19:32:0F:A6:E2:94:EA:18:BD:76:C4:F1:EA:8B:84:75
Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8
Certificate serial: 010D0C9F432858497279BB47F500A40FAA6EB8C0
Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 399521
IP address blocks: 172.98.8.0/24 maxlen: 24
172.98.9.0/24 maxlen: 24
172.98.10.0/24 maxlen: 24
172.98.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:bb:47:f5:00:a4:0f:aa:6e:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=69d88940-45ad-4ee6-abea-913a9d22c5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:da:0c:06:c5:e3:82:31:1e:2e:19:00:92:
c4:4c:62:0b:4f:b1:a9:1c:48:1e:63:fb:4a:a6:6d:
0e:30:bd:62:9f:91:c6:dd:6a:46:0b:2b:3e:00:02:
b5:61:4f:bf:5d:e9:c2:04:9c:f8:29:3d:22:ce:6c:
b4:bf:d0:d9:6f:82:20:eb:0f:6a:97:ac:b0:8d:ea:
f6:f0:e8:db:4f:de:39:b2:8e:b1:e2:bc:c4:92:17:
b5:b2:3d:62:10:4a:0c:94:d6:91:32:70:e6:f6:d0:
b3:15:1c:cf:89:97:e0:97:ed:4e:95:4c:ce:68:cd:
8d:be:7c:39:4c:a2:56:b8:d7:ac:82:61:f9:07:f1:
69:04:d3:05:65:f0:16:72:c9:cf:91:e3:2a:e6:47:
e4:fa:a4:27:b4:05:f0:4c:fd:82:3d:a0:20:b3:27:
24:e3:1b:ab:9a:87:af:76:3b:39:47:4a:b4:a7:43:
82:ea:c9:f9:e8:14:6d:e2:5b:a1:4e:ca:23:90:0a:
f5:14:f4:f4:7a:86:4c:de:21:4a:b6:ca:d6:9a:1a:
54:2c:6e:ca:8f:9e:ee:61:b8:38:3a:48:55:bd:63:
7d:74:f8:b3:19:b0:4c:60:a2:61:d3:a3:80:80:a2:
ef:43:3f:b8:62:0d:27:41:82:24:71:af:80:43:d7:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:04:89:17:19:32:0F:A6:E2:94:EA:18:BD:76:C4:F1:EA:8B:84:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl
X509v3 Authority Key Identifier:
keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:ff:83:d1:d3:32:4b:2d:78:2f:b2:65:ea:28:a0:b0:c6:80:
33:cd:c9:f2:66:72:11:2b:1b:86:1b:60:25:78:8e:9c:22:25:
b8:7d:0a:1c:24:89:57:25:f1:ff:93:01:ae:ec:e7:68:76:5c:
ef:1a:fe:a5:89:43:aa:26:c1:70:c7:7e:d8:d6:8e:39:ae:b8:
85:b9:11:9d:15:94:df:0b:2f:04:83:0a:ff:d7:74:16:89:d8:
0a:00:72:7a:11:eb:31:32:99:5a:90:c4:92:01:45:07:e6:9f:
ba:9e:09:44:1b:25:91:64:f1:8b:53:07:b1:ed:3d:76:e7:73:
22:9d:98:5b:bc:1f:69:2d:9e:d2:b6:5f:9a:76:5c:dc:17:cd:
db:62:fa:d6:6c:15:f5:8f:e3:bc:95:78:04:9b:37:a3:16:63:
ed:fe:75:22:8f:ef:df:29:06:6a:70:63:87:83:77:8c:c7:f1:
70:e4:4c:1e:47:a8:cd:2d:d6:ba:31:ea:65:1e:a6:8b:ea:77:
70:c4:a3:01:f6:8b:11:c2:46:8b:d2:9d:1b:3c:7d:e1:e8:47:
b2:ac:1e:16:e0:c8:c5:4b:88:53:95:4e:02:28:1c:96:76:c9:
07:6f:e4:3a:d4:e9:59:83:d0:1d:5e:77:d3:50:75:02:20:4a:
5e:97:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:35 2025 by rpki-client on console.sobornost.net