Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d621274f-d80b-3b0b-96d9-ff2311396a4b.roa
File: d621274f-d80b-3b0b-96d9-ff2311396a4b.roa (raw, json)
Hash identifier: 9tVyiG4dnsetGQi9rXIEm6V0MP6cTtT/OiSnFNqEczY=
Subject key identifier: 7B:7C:38:BF:B8:57:14:E9:B8:B6:E8:1E:D4:65:60:A9:11:AE:C6:5A
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285849350E94D0CD94B9E9ED3D5F00
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d621274f-d80b-3b0b-96d9-ff2311396a4b.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 13576
IP address blocks: 216.106.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:94:d0:cd:94:b9:e9:ed:3d:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=8a8ca85e-20ff-4894-a7bc-f8e8d2030760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:4f:96:b1:cd:ab:20:03:6e:bf:e5:33:1a:
1c:73:0c:c1:bc:96:51:06:a2:52:aa:72:4f:7b:29:
92:58:6d:d6:8e:a9:00:48:97:3e:6d:f1:09:aa:b4:
24:b6:ba:6b:ad:a4:34:41:46:20:9a:25:a0:77:0b:
f8:75:7c:5a:88:42:50:39:1c:a0:80:e6:77:61:cd:
81:28:0d:52:0d:81:9e:cb:0a:3c:ae:57:dd:23:d0:
2a:4d:b2:60:b0:5a:de:34:46:b5:39:be:d0:c7:82:
68:c8:fb:4e:c5:64:36:10:69:23:10:e7:72:0d:dc:
c3:6e:5b:d0:04:31:10:ba:c9:ea:7c:e4:1b:f4:42:
0c:25:48:9f:71:e7:99:a8:ac:c5:f6:e9:8e:fd:bb:
06:96:07:11:cb:aa:ec:e7:bd:00:85:b5:74:55:14:
70:aa:3f:0f:6f:e5:9e:7c:da:57:a2:31:b1:58:f9:
2e:ce:cb:e2:8c:4b:02:9d:20:64:aa:78:e2:dd:a4:
5a:84:bf:5a:ed:0e:39:16:c5:85:c5:54:03:55:19:
50:12:94:ed:be:69:73:67:27:e0:cd:28:d1:f2:bd:
73:e9:18:3c:8c:0c:bd:3f:b4:b8:bf:58:7f:4a:8d:
b8:d9:10:3d:0d:02:ce:a6:49:22:94:fe:0d:a5:0a:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7C:38:BF:B8:57:14:E9:B8:B6:E8:1E:D4:65:60:A9:11:AE:C6:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d621274f-d80b-3b0b-96d9-ff2311396a4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:cc:7c:24:b7:bb:38:57:0d:37:94:35:76:99:d0:5d:73:65:
0f:e1:ae:cf:23:59:a6:c5:a0:1d:92:55:e1:71:07:a6:81:b4:
c8:2f:b5:a2:c1:90:b8:e0:6c:5d:5e:82:39:df:59:5f:43:53:
b9:0d:f2:2d:2a:f1:a3:fd:49:9a:06:60:f0:c7:9c:09:30:03:
69:92:24:49:f0:2c:4d:ca:ba:86:f4:2e:8c:d2:53:00:dc:0b:
f9:52:82:56:97:91:49:b9:37:42:24:4e:89:6b:09:ea:8d:c8:
3f:5f:1a:2b:5f:1f:a7:2d:f5:d9:c5:1a:3b:91:ee:91:46:36:
28:51:91:59:9a:d0:43:18:f7:cb:55:c9:7d:7d:5f:27:2c:61:
93:f8:02:30:64:5b:fd:2f:b0:6b:31:e0:2b:47:04:c2:82:e9:
9d:03:22:e3:a2:de:b4:3f:a4:22:6c:3f:e2:dd:95:6f:3b:66:
63:dc:fa:65:20:70:23:4b:d8:ea:23:63:6c:52:a6:5d:f8:e6:
63:25:44:7e:cb:8c:67:15:29:fb:b5:6d:25:79:a8:f7:6c:f5:
b4:06:e1:38:ba:c5:92:5d:2d:6c:08:a7:bb:51:53:d9:a9:7c:
c1:c9:43:0a:b7:ef:b5:d1:72:f1:4f:6d:f6:3e:5d:6f:80:63:
45:69:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:30 2025 by rpki-client on console.sobornost.net