Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa
File: eae45858-8801-3371-b8aa-053a42b2e3ee.roa (raw, json)
Hash identifier: 8v4DicP56FD2R9LAMr3wR9+kcvcRZdzzJHthsbHhlzY=
Subject key identifier: 33:F1:D0:33:10:AF:82:61:EA:EF:0F:D4:26:7C:C8:56:01:72:7E:D2
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858495D896E3DF8EDF6FCA2897A80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa
Signing time: Mon 31 Mar 2025 01:00:47 +0000
ROA not before: Mon 31 Mar 2025 01:00:47 +0000
ROA not after: Sun 29 Jun 2025 01:00:47 +0000
asID: 3477
IP address blocks: 192.58.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5d:89:6e:3d:f8:ed:f6:fc:a2:89:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Mar 31 01:00:47 2025 GMT
Not After : Jun 29 01:00:47 2025 GMT
Subject: CN=66427551-8f32-48f7-a748-394c2ea56664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:51:66:4b:f1:a0:9c:b1:91:6a:2b:fd:25:
82:27:91:29:57:73:ed:e6:71:20:51:31:7f:6f:0c:
3d:5e:94:61:54:47:df:72:3f:bf:ed:eb:6e:6c:da:
0e:b8:1c:e4:16:cd:5d:ee:53:44:55:fe:38:56:77:
dd:e4:f1:47:f8:1c:55:cc:47:1d:31:15:e7:88:df:
03:da:3e:d4:d4:f3:97:8f:c7:55:f2:86:f6:82:17:
9f:2d:d1:66:00:95:82:8d:90:02:9d:30:49:e2:28:
99:e0:7b:43:ed:4b:fa:aa:b9:b7:63:14:71:58:4e:
f1:d6:18:02:74:4d:e3:7b:26:05:3e:dd:51:7f:5c:
c8:81:f6:c3:ca:f9:02:bc:81:a3:ee:7a:81:6a:8a:
e3:73:e1:8b:6e:78:b9:cb:85:fa:db:b7:54:dd:bd:
4c:d6:27:60:0d:8a:ad:b8:63:13:f6:db:85:d5:80:
dc:28:d7:e6:31:eb:95:45:a8:f6:28:90:56:40:45:
36:c8:8b:58:08:2f:52:f4:52:d5:ae:b9:ca:2b:ca:
27:d3:f6:5a:73:3c:c4:3c:ec:97:ee:de:b6:b6:cd:
ee:fd:6c:c1:8b:6a:a2:72:41:15:9c:0b:18:9c:2f:
2b:91:d2:d2:27:27:06:37:8f:4a:e8:ad:79:9b:d9:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:D0:33:10:AF:82:61:EA:EF:0F:D4:26:7C:C8:56:01:72:7E:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:c3:47:6d:79:75:02:b7:63:67:15:01:80:0e:37:61:1e:94:
43:f1:67:27:56:dc:15:00:2e:2b:78:d8:79:5f:1d:71:35:48:
82:54:d5:2e:4f:1a:21:ba:90:d0:97:97:d9:34:48:c2:73:75:
9b:25:a9:64:f0:20:46:7f:f3:13:16:94:c4:97:40:a9:eb:c5:
29:8b:e6:89:89:13:19:a6:eb:18:1b:cf:af:b8:9c:6a:e7:6e:
eb:68:0a:aa:ac:eb:e4:96:f2:98:47:d2:9a:b1:9a:a9:97:b6:
50:34:ad:cf:f5:8c:70:24:12:3e:80:5c:76:1a:36:b0:6d:a8:
3e:a8:02:76:f1:6c:13:59:b8:92:72:c2:0d:c7:4b:79:b3:de:
73:57:54:fc:89:ef:9e:49:22:08:af:86:12:99:d2:2d:9f:7d:
17:0b:41:7a:a3:cc:23:51:6c:12:a0:61:4b:e8:30:f3:cd:db:
c5:65:05:1b:e4:22:29:b1:a1:32:21:18:69:00:ec:d6:60:72:
45:d7:d5:06:f0:2e:d2:e6:92:40:bc:8d:ed:f1:ca:e5:5f:35:
5b:55:18:57:00:36:52:24:da:00:6d:0e:17:82:89:57:61:d2:
44:e2:db:6a:d3:9b:95:8e:ed:a3:e6:25:00:19:38:bd:b4:f7:
bb:08:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:32 2025 by rpki-client on console.sobornost.net