Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa
File: 476c714e-2cf9-3b0d-a179-f838724e41da.roa (raw, json)
Hash identifier: fXgBMbnBK5OuC0/N2aOlYoWy8Ngyq6VBC76XErLc7i0=
Subject key identifier: B1:7F:23:EE:4B:92:2E:C6:44:14:1C:94:CF:80:1B:D4:CF:0A:61:18
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F4328584976A994CF261194A1F0802080
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 13627
IP address blocks: 209.112.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:94:cf:26:11:94:a1:f0:80:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=d949b1f0-4512-4849-acd1-5b22e21eda3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:e2:07:6c:27:50:16:fb:14:56:07:ca:f1:
2b:50:14:ab:3e:2c:fb:a0:ac:8e:b6:9f:4b:28:20:
5f:e1:8c:86:c1:97:d0:fa:05:ce:a8:1e:05:be:82:
a6:a9:dd:c6:eb:4b:9e:2c:e3:ca:b3:91:7c:be:b5:
7f:71:66:3f:45:70:8b:27:7d:9b:39:60:d8:ab:c8:
5f:b6:a4:8a:82:d2:d8:d3:8b:51:b5:76:d2:e9:b0:
77:34:a6:01:2d:b0:dc:57:8e:d9:ca:a6:b4:df:82:
47:b3:3f:1f:96:4b:a4:2e:ed:9b:a8:68:be:12:64:
73:b9:b6:e4:7b:86:2d:a2:ba:3b:aa:9a:5f:4f:45:
f2:e4:34:72:84:1f:d4:33:c6:57:9b:76:12:7d:10:
bd:1e:2e:82:36:6b:04:f0:73:2e:fb:ee:8d:7c:72:
23:cf:84:4e:74:ce:29:52:5b:6f:13:9f:6a:6c:11:
db:1a:47:c8:70:25:3e:52:5b:89:36:bd:57:ae:c5:
39:31:d2:4e:39:58:0f:44:8b:86:ba:60:9d:57:2d:
74:29:f2:cd:e0:83:17:4c:d8:1e:bc:53:e5:6a:db:
f0:e1:8e:cc:18:5e:3e:78:ae:f6:1a:97:fa:9d:b4:
51:f8:cb:ba:c4:f4:87:d8:5d:c9:16:c1:50:c0:5d:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7F:23:EE:4B:92:2E:C6:44:14:1C:94:CF:80:1B:D4:CF:0A:61:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:5c:53:b1:86:5e:82:64:48:8c:90:3e:d6:bb:02:75:b7:41:
8f:d8:3f:04:1e:c2:03:b1:85:7e:4d:e8:78:f0:d3:0f:bb:c1:
ad:be:18:bd:4a:3e:89:32:1b:81:e8:42:71:7f:15:ff:f2:b0:
d1:ca:af:60:88:42:8f:03:a3:8d:58:f3:28:15:a7:be:c8:4b:
b1:ec:54:42:87:5a:80:4b:bb:d9:82:0f:13:4e:9e:07:74:a2:
c1:1b:21:87:4e:83:5f:5e:75:c2:e6:dc:04:7f:95:0d:e3:c1:
b2:bb:cc:19:01:24:0c:71:fa:4c:20:95:68:22:87:87:ce:bc:
d5:70:df:80:27:48:5d:37:8c:c6:14:89:f6:db:fe:1f:4f:4e:
01:8c:7a:53:12:f0:96:c2:19:58:da:77:6c:03:b2:1b:2a:b8:
8f:e7:3d:49:86:35:1d:6d:53:02:f9:b9:94:e1:dc:57:6c:92:
5d:d7:ab:8c:e3:e0:55:af:63:f8:a2:d8:12:2a:76:93:ba:53:
94:be:c3:ff:2f:70:5d:7c:c3:ef:0c:1b:ce:9d:bb:6e:b0:38:
19:23:66:4f:38:18:c1:8a:f7:f2:d7:d4:6e:3f:be:0a:30:c2:
5c:c0:1c:3c:ef:03:1a:d8:1d:24:ae:1a:b8:c4:f2:2c:7a:ed:
b6:c7:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:11 2025 by rpki-client on console.sobornost.net