Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa
File: f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa (raw, json)
Hash identifier: ZGNXnJnSiEYfOlMp3e/3MBGr15zeOQovwgq2WlFPcJI=
Subject key identifier: ED:39:EB:91:64:E5:C0:51:FD:E7:35:CB:A3:A4:F6:CD:7A:02:70:E1
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858497AD9BFD3FABB15625D17C4C0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa
Signing time: Thu 10 Apr 2025 13:00:59 +0000
ROA not before: Thu 10 Apr 2025 13:00:59 +0000
ROA not after: Wed 09 Jul 2025 13:00:59 +0000
asID: 2559
IP address blocks: 198.217.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7a:d9:bf:d3:fa:bb:15:62:5d:17:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Apr 10 13:00:59 2025 GMT
Not After : Jul 9 13:00:59 2025 GMT
Subject: CN=90d8323e-cbf1-4cd0-89c0-3718ed17970a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:c2:db:e2:7f:69:75:f3:08:13:b6:c0:1c:
26:d7:0f:86:2f:30:6c:17:81:3c:00:d5:a9:58:21:
83:28:72:6c:65:12:e2:48:3a:88:0d:b2:6b:d6:d8:
14:5c:5f:99:22:b7:be:ae:df:b0:35:8c:53:9a:5e:
c3:8c:7b:c1:7f:50:56:4d:9c:fb:b4:bd:e3:d4:c7:
ac:92:64:aa:9c:7c:15:a2:15:cd:ad:88:39:87:66:
ef:8e:8a:a0:90:e6:91:0a:2a:d2:b7:26:c8:5b:b9:
a9:b8:f0:5a:5e:3a:2d:1c:73:d1:1f:11:e2:21:01:
67:b1:a5:3b:0c:e2:46:a3:57:76:d8:d0:c3:5d:0b:
f4:24:19:45:8a:3e:dd:9a:4e:9d:58:4f:e5:6d:2f:
5e:1a:1b:17:98:8a:a0:89:70:45:71:d2:5e:af:b0:
e9:75:5b:f6:3a:a7:54:b4:f3:af:49:45:ce:38:f9:
9f:e8:9e:24:b5:ea:dd:a1:44:7c:9e:8c:b2:26:76:
d5:e2:bd:89:d5:3d:21:3d:fe:91:5c:c7:44:c0:6e:
4c:7f:38:73:79:ba:5a:3d:1f:45:56:4f:89:11:1d:
b2:39:18:fa:9c:cf:c8:3d:4d:f1:4b:80:0f:6a:bb:
26:e6:52:d9:89:4c:57:9e:c1:ca:61:af:d7:70:25:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:39:EB:91:64:E5:C0:51:FD:E7:35:CB:A3:A4:F6:CD:7A:02:70:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.217.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:e0:bb:db:8a:44:54:ae:27:45:3a:6a:f5:7a:6e:fe:d5:7d:
40:53:e2:b1:00:4a:0e:ca:82:5e:fb:01:9a:b5:56:00:71:8a:
2b:67:5e:a5:5e:5f:88:54:c8:de:5c:67:d1:53:e9:34:a7:ec:
bf:c3:d7:4d:37:a8:99:02:6f:3f:47:96:91:92:9d:1b:08:09:
bf:85:34:74:2f:a9:ec:d8:f6:79:9d:95:c4:cf:88:fb:3d:50:
32:b9:33:89:86:f4:fb:13:e1:bc:87:7d:fd:ca:68:57:fb:90:
2a:a7:c6:dc:f1:42:7d:04:2f:e7:2c:24:27:87:07:ce:dd:57:
43:19:72:e6:44:9a:c9:af:a8:e0:c6:63:64:39:4e:04:e9:bb:
92:03:b4:cc:13:68:25:29:68:b2:6f:bb:dd:f8:96:ff:e1:a3:
90:f8:5b:55:7a:59:91:18:70:46:4e:fc:12:94:54:f4:ce:a7:
12:78:7b:d3:0e:f7:55:b3:54:ff:4b:f3:ae:6d:b4:2a:25:64:
48:7c:fb:b4:5c:94:ee:38:51:e4:ab:19:6d:8e:bd:21:d7:a4:
49:6e:3e:64:2f:35:00:95:02:ab:e4:98:00:7e:f0:41:a3:17:
d4:92:ad:25:30:0c:23:93:e7:9d:af:9b:2e:9b:0b:1d:a2:cf:
b7:c0:2e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net