Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa
File: f880db5b-e47b-395f-bff3-27346670e7a5.roa (raw, json)
Hash identifier: wOZAFrPbBNGXkaGNDCPKMCyulahTFV5D3BfRj9t4fnk=
Subject key identifier: 05:59:C1:A7:65:D0:11:43:81:7D:C8:CE:02:89:07:5B:AF:0D:4A:D8
Certificate issuer: /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Certificate serial: 010D0C9F432858497DA46FCAAE1706197A543A80
Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 16509
IP address blocks: 209.127.216.0/24 maxlen: 24
209.188.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a4:6f:ca:ae:17:06:19:7a:54:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=5e8ee252-20fe-4d1a-9348-01b8f8fbc5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:0b:8b:a3:b9:39:5e:15:aa:fd:b4:74:83:
9d:3d:f0:2a:0a:d4:dd:15:dc:2d:ca:e1:3e:df:a0:
a2:f9:11:d9:27:05:f4:cb:6d:a8:81:8d:41:84:a8:
66:ef:a5:6c:a0:bc:dd:56:87:c0:68:c4:aa:a3:40:
ab:9a:17:ef:85:7a:98:ab:bc:c5:a7:d2:c2:6b:8e:
9b:68:e9:b6:70:b2:a3:7b:82:ca:f7:a2:f1:08:a2:
28:df:77:c4:b2:88:08:b2:4d:07:00:90:4c:c5:8e:
43:be:8a:21:e2:f1:4d:f4:ac:c8:51:04:02:49:0d:
d8:4f:9a:dc:80:c2:c0:32:bc:2a:9e:d4:c1:3c:e2:
4c:3f:b9:9b:3c:e0:4c:96:84:d5:ac:54:9c:1a:6f:
c7:45:10:94:6a:16:a5:fe:56:2c:20:3f:ec:d0:17:
4c:2e:54:16:6e:95:e8:bd:0a:b1:7c:31:49:c9:5d:
7f:3a:a9:c5:14:8c:3f:0a:73:92:14:79:9f:80:1c:
d2:af:e0:00:96:7d:d5:73:77:0f:fc:b7:f7:be:d1:
54:69:05:df:6b:0a:4b:0e:4e:bc:15:90:99:53:82:
f7:75:69:e3:15:95:91:3b:9b:ff:43:bd:09:70:1a:
5e:04:28:ff:17:12:f8:73:19:1d:8a:29:1b:2e:64:
d0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:59:C1:A7:65:D0:11:43:81:7D:C8:CE:02:89:07:5B:AF:0D:4A:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl
X509v3 Authority Key Identifier:
keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
sbgp-ipAddrBlock: critical
IPv4:
209.127.216.0/24
209.188.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:c3:e1:b7:52:76:85:73:2c:06:12:f2:e3:c6:b6:f9:f5:d2:
9d:ac:f6:9b:8d:fe:cc:24:d6:41:c4:c3:42:73:67:27:ef:0c:
9d:8c:5c:49:ae:3f:0f:76:02:b0:a8:f0:c5:9e:56:ce:a0:4d:
02:d9:fd:11:8e:32:96:04:72:b9:f2:42:14:ac:74:1d:ae:96:
db:72:42:c3:76:bf:c3:d0:9b:62:ad:13:c8:79:a5:cd:9e:cf:
3d:aa:8f:bb:a6:e2:08:08:27:8f:6e:8c:7d:ec:04:86:f0:13:
18:67:02:7f:84:e3:77:53:21:fc:1f:1d:28:e2:66:35:96:6d:
39:57:3a:87:7f:53:f7:a9:80:3c:b5:8d:67:8c:85:8e:26:09:
c5:46:e3:12:8d:33:96:bb:dc:18:f8:19:f2:1f:5d:94:b8:b6:
72:00:95:c1:f4:6a:c5:d0:2b:47:56:67:ea:9f:01:a0:14:f5:
d4:ee:6f:9a:10:26:eb:6f:e9:7f:73:3e:bd:25:36:31:03:5c:
23:d0:ba:69:11:97:30:88:e4:96:46:1f:a2:a4:aa:5c:a9:66:
f6:19:b1:ab:16:4a:e1:2a:b9:09:7a:5a:ff:56:8e:ce:86:bf:
ba:f7:ae:1d:f2:73:20:17:98:ed:3a:8d:4a:d8:fc:ac:51:30:
f5:44:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:11 2025 by rpki-client on console.sobornost.net