Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/28c30aa5-4bcd-39ef-b34d-0e041b25b4f8.roa
File: 28c30aa5-4bcd-39ef-b34d-0e041b25b4f8.roa (raw, json)
Hash identifier: /qkXhVXehD1Md9EEhmGgVQLDZEAvKPcdpSi+LRl4MS0=
Subject key identifier: 13:60:B3:33:86:77:F1:95:1C:B0:E2:F6:DF:41:8F:96:A7:29:5A:9A
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858497AD9BFE444C748A6AF2AEB00
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/28c30aa5-4bcd-39ef-b34d-0e041b25b4f8.roa
Signing time: Thu 10 Apr 2025 13:00:59 +0000
ROA not before: Thu 10 Apr 2025 13:00:59 +0000
ROA not after: Wed 09 Jul 2025 13:00:59 +0000
asID: 2559
IP address blocks: 198.217.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7a:d9:bf:e4:44:c7:48:a6:af:2a:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Apr 10 13:00:59 2025 GMT
Not After : Jul 9 13:00:59 2025 GMT
Subject: CN=9516f5d7-af8e-47b6-b64f-2b98ada9987c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a5:22:c1:44:60:04:02:46:81:55:74:1b:6b:
fa:2d:a6:96:f1:c7:ad:ec:d5:e8:7c:44:ae:fd:38:
6b:0c:39:f2:2a:9c:83:15:2d:84:0b:24:ce:40:fd:
a3:62:d4:0b:41:2c:90:6c:3b:ac:d5:5a:fe:08:50:
b8:c4:fc:d8:3a:e5:88:15:55:8d:d2:6e:b1:9d:bb:
8d:cb:a9:de:40:0e:3b:1b:4e:10:84:33:43:e9:f4:
eb:3f:6f:7b:4e:c2:2b:a8:7d:c4:62:91:ba:0f:37:
8f:ef:4d:5f:86:9f:91:53:a5:2d:77:d5:06:4f:4e:
67:b9:28:63:e6:26:87:a1:1d:71:f1:81:ba:56:b8:
c7:b9:52:aa:c1:7c:eb:82:da:ca:c4:32:55:2c:e0:
e0:d9:f6:5b:fc:cd:12:65:ad:88:d0:95:1d:82:01:
bb:c6:f4:b4:ab:fb:b8:9c:c4:cd:56:e8:84:8a:09:
57:4c:18:58:ce:97:e3:d9:ba:39:81:ac:07:99:1d:
4d:12:36:4c:e6:f8:b0:a3:2c:dd:72:d8:cf:89:a3:
d7:a1:12:8a:16:d0:c5:ae:c3:06:93:4a:a5:87:94:
3f:2d:b9:9e:42:6b:9a:fd:f8:ed:9f:83:a9:d4:b3:
59:2a:89:9e:52:3c:03:ba:70:55:de:da:82:74:bf:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:60:B3:33:86:77:F1:95:1C:B0:E2:F6:DF:41:8F:96:A7:29:5A:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/28c30aa5-4bcd-39ef-b34d-0e041b25b4f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.217.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:a8:54:97:3c:86:5d:82:c3:c8:75:36:bf:48:5d:56:17:81:
2e:a8:89:df:aa:88:7d:cc:5a:e1:75:ee:4b:0e:be:4a:6a:72:
72:4c:91:f1:d1:e3:c9:bf:1e:2b:87:48:5c:49:4c:46:c3:5b:
33:25:9a:41:7e:0d:1b:cf:34:26:9f:64:62:51:33:88:fb:81:
62:0b:49:27:59:b3:e8:c6:9d:7e:b3:f1:19:01:ac:8e:fa:32:
a7:be:30:dc:38:e3:06:5c:31:7a:b0:78:2e:59:12:44:65:85:
6a:6c:ee:a0:86:ad:3d:5b:f7:18:82:41:f4:5b:10:2b:95:de:
67:5f:33:f6:e1:f7:29:63:88:fc:8e:1c:3c:99:f1:b5:87:17:
13:29:2e:42:f8:7e:ea:79:6a:28:d6:01:10:3c:a3:8a:a1:32:
c7:05:ba:80:30:c3:30:75:96:50:65:b2:67:e1:15:7c:44:07:
4c:a1:5b:76:99:c0:e3:26:c4:b6:be:f7:90:57:f7:f0:f8:d2:
2b:6e:f8:6c:e0:5c:dd:e2:c3:90:3a:38:52:ef:29:1d:6d:db:
b4:2b:bf:39:46:f5:a2:1b:9c:95:2c:ac:24:0f:b8:c6:57:70:
d9:36:c8:33:b8:71:2d:f9:9a:85:9c:4c:38:42:aa:04:4e:fd:
71:d1:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net