Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa
File: 2caf07cb-0d21-3238-a345-2f65b0288131.roa (raw, json)
Hash identifier: MTxATIXNRYYrqBg0WSwnn3T3a4HA2vwkAQWxC4/jSfo=
Subject key identifier: 22:D8:79:AF:92:71:EF:70:0B:90:58:45:49:D6:F5:BD:BE:96:DF:56
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858494E2EB4D42B4F7C455D847FE0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 2559
IP address blocks: 198.241.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b4:d4:2b:4f:7c:45:5d:84:7f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=81834a08-3b37-4828-bebc-a1a998c7eb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:76:6c:a6:69:d8:46:3e:93:26:e1:42:93:3f:
42:d6:32:fb:f9:57:5a:9d:95:cc:60:83:46:bc:c3:
39:cf:33:3b:f0:0a:7a:51:f6:0e:ff:ae:ef:dc:a4:
2c:15:cf:f0:4b:2c:59:28:ad:67:d9:b3:bc:8f:e4:
60:9d:89:6b:c6:11:d7:c9:a9:15:70:de:39:02:c8:
a9:18:e5:e4:08:4c:9b:0e:17:60:08:a6:31:43:c1:
30:a3:8b:0e:83:f7:f6:5b:08:58:b5:98:06:92:a9:
33:4e:59:18:30:e9:b3:45:34:33:ab:6e:fa:7b:3e:
4e:99:68:70:1c:d7:96:36:b0:1d:7b:29:22:7b:84:
90:02:13:52:a8:98:7e:cb:64:62:d1:57:e5:cc:b8:
8f:3b:6d:b4:41:3a:60:62:4f:d5:c1:72:cf:47:f6:
b2:d3:9d:ac:78:53:c3:17:20:fb:93:24:98:13:0d:
9b:5b:b3:5c:ea:93:29:e5:1a:aa:2a:c3:d4:1f:0d:
8e:88:eb:7d:13:47:64:66:86:4e:34:52:01:d5:f2:
d7:72:d4:44:5a:53:1c:87:83:c8:cf:8e:7d:36:4f:
36:6a:b0:18:4d:64:e3:4e:58:2b:ff:65:10:58:30:
e4:0f:65:a4:fa:ec:c9:7f:13:92:9a:8b:a2:85:e9:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D8:79:AF:92:71:EF:70:0B:90:58:45:49:D6:F5:BD:BE:96:DF:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2caf07cb-0d21-3238-a345-2f65b0288131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:9a:c7:b4:13:32:25:f8:1e:6c:19:0b:c4:94:38:32:f8:30:
20:10:20:ba:78:55:0f:b4:50:06:e6:f8:de:07:2e:ba:d4:57:
f6:c5:77:3e:5f:89:28:72:38:af:e8:fb:60:fe:e3:6c:50:44:
53:58:b5:53:7b:e9:84:82:63:75:ff:59:20:dd:98:bc:0e:67:
07:80:17:e8:72:5f:f6:27:5e:8a:03:a8:32:ed:16:b7:fa:57:
b6:8f:5d:45:31:46:d1:f5:b3:e7:67:e3:39:bc:40:f7:78:57:
37:09:af:31:cf:17:f0:24:44:4f:a0:36:44:b4:13:c5:a5:52:
91:bc:d8:06:52:e2:25:73:c6:a4:7b:fb:50:44:8e:96:b1:fc:
fb:d2:3a:ec:e0:64:f1:d5:c4:a3:39:33:fb:e5:3b:09:48:87:
5f:09:87:26:a2:5c:12:f9:37:05:c0:23:9c:bd:c3:d1:0f:9e:
09:78:45:d8:a8:e3:a0:16:08:56:a6:6f:6e:cc:1f:c9:bd:d1:
be:09:21:00:5e:ae:62:15:e2:44:25:c0:51:59:8e:30:70:ce:
ff:81:95:00:84:a1:1e:00:01:3a:7b:ef:46:7f:fa:0d:91:40:
61:45:e6:70:3c:02:67:b7:e8:c6:48:bf:c4:f2:28:0e:9d:0c:
81:3b:d8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net