Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89aa5d99-a10e-3961-a429-da0c9e3a590c.roa
File: 89aa5d99-a10e-3961-a429-da0c9e3a590c.roa (raw, json)
Hash identifier: L48ShCDfkkfqX22Ek5mi0H6TxFAfRfFF6Ie0mlZh5gE=
Subject key identifier: 30:8B:7E:12:D9:C2:AF:4E:20:EE:EA:DD:2D:43:F5:3D:99:81:24:B3
Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial: 010D0C9F4328584961B99CA8DD4F92E2864ED200
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89aa5d99-a10e-3961-a429-da0c9e3a590c.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 6498
IP address blocks: 75.78.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:9c:a8:dd:4f:92:e2:86:4e:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=12c19a94-13c1-4678-a239-c8b6018f9c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:02:e2:5b:a3:97:78:31:ec:62:b6:73:7f:
c3:3c:51:21:a7:79:1c:6b:99:53:27:23:ba:ef:cb:
2a:58:b9:b1:5c:e0:6d:af:ff:60:4c:8b:87:39:f5:
81:69:74:dc:62:c3:92:f7:b9:ed:4b:d2:fc:86:c8:
d6:f2:c1:6a:73:2d:0a:0f:19:6d:71:29:9f:2e:09:
73:0a:98:e7:74:3a:a3:40:e3:f9:d8:2e:f6:ed:8b:
18:14:6c:54:55:8f:59:31:52:54:cb:c5:24:5f:0b:
00:25:36:c9:11:c1:9b:15:fa:cb:25:60:3f:9a:05:
f4:c4:77:71:d0:75:df:96:d9:d9:62:d1:69:30:34:
ee:9b:65:5e:2e:d1:5d:1a:bb:d2:fe:c7:9f:66:8a:
4d:f7:5f:38:f8:79:46:3c:41:64:19:88:c6:22:85:
d4:23:1b:21:b0:54:43:bd:03:d9:d3:d7:69:07:52:
cf:92:40:75:66:a5:c9:7d:7f:55:14:f1:69:8a:d3:
1a:47:c0:7c:af:b7:e6:da:4a:f4:24:ec:cb:88:82:
6b:c7:d4:73:7d:f0:1c:9e:1d:23:94:e6:8c:94:64:
96:6c:2a:ba:8f:e6:1b:74:4f:5f:86:4f:a7:b6:f4:
f3:8a:a2:bd:73:54:45:47:a6:a7:94:fe:51:21:ea:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8B:7E:12:D9:C2:AF:4E:20:EE:EA:DD:2D:43:F5:3D:99:81:24:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/89aa5d99-a10e-3961-a429-da0c9e3a590c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
X509v3 Authority Key Identifier:
keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
sbgp-ipAddrBlock: critical
IPv4:
75.78.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:3d:32:3a:b9:6e:da:19:a2:fb:a1:78:dd:d7:ad:7a:b3:10:
3d:05:0b:47:63:9f:1c:79:f7:47:73:3f:05:56:4a:b9:77:87:
bf:5f:3c:c4:d6:df:05:79:34:e1:af:fe:58:ca:0b:4f:32:29:
72:2f:f6:c9:3d:00:e7:ca:86:8e:9e:77:53:82:13:cc:dc:e2:
a9:8e:98:67:a8:9d:96:c3:e2:b2:85:e3:bf:be:0d:bb:96:4e:
f2:4d:f1:c3:33:4c:26:9d:c3:3c:02:e1:c0:c4:20:47:9b:20:
d5:ac:7e:8e:59:ff:36:c5:c3:55:f1:04:6c:5a:a3:e9:f4:f3:
b6:a6:9c:48:67:05:f9:a6:4c:14:37:08:dc:ab:3a:8c:49:ac:
5d:6a:58:e1:63:78:43:af:85:f1:d4:a3:ee:16:09:21:1d:cf:
dd:ab:47:1a:c1:03:50:8f:05:39:7f:83:02:8e:d5:21:f2:01:
96:6f:c0:ea:11:71:f3:1b:bb:88:c3:93:81:c8:3a:95:ac:01:
ea:a3:04:d9:36:1f:1a:d2:c9:e0:f0:74:b3:c5:16:43:5b:2a:
ef:17:80:17:67:72:d3:ec:10:96:e8:7e:ee:00:79:7e:61:68:
8c:f5:ba:9b:fd:5a:b2:10:e7:8d:1a:ba:09:34:c1:65:7f:6f:
af:4b:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:21 2025 by rpki-client on console.sobornost.net