
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa
File: f40e0e47-941a-3211-9018-ea3a5bb33892.roa (raw, json)
Hash identifier: /NAK/vFEfI0OndlqdcYSzJEbJqZJ1BidN8wdO3p9Zxg=
Subject key identifier: 2F:1B:C5:5F:E6:E6:A2:B5:7B:66:59:4B:22:CF:D9:58:84:E3:61:C7
Certificate issuer: /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
Certificate serial: 010D0C9F432858496A199CB3DC04BDC153D54B20
Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 26661
IP address blocks: 199.96.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:9c:b3:dc:04:bd:c1:53:d5:4b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=bd5e80e2-930c-4ccb-ab57-e71d9371a1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7a:6b:06:51:6d:24:14:4f:d9:48:33:98:e3:
c7:04:a0:75:14:43:49:e1:32:d1:77:fa:bf:6c:99:
b7:0c:3c:95:b1:71:2f:ef:e1:e6:25:7a:06:5c:1e:
81:bd:17:de:ef:a1:67:ef:68:59:d2:70:82:5f:31:
66:97:9c:5c:03:fa:ca:d7:07:9f:1a:1b:ec:78:32:
60:b8:ff:4c:d4:ec:f3:e7:ed:c7:e8:60:73:98:3d:
36:81:5c:fc:34:a9:53:a1:a0:b4:c5:2b:d2:cc:d0:
95:4e:26:0c:5a:5e:46:24:28:4d:8f:fd:9a:57:77:
b9:f2:17:c4:7d:c6:c3:36:b9:76:4c:b6:84:d6:71:
f0:25:89:e4:38:41:9b:bc:07:77:77:e7:03:5d:a6:
29:12:ad:1b:09:bc:ae:89:cf:09:87:89:b6:d3:63:
52:48:af:aa:e8:6d:93:35:47:4a:91:20:dd:73:19:
d6:cb:df:2a:e5:e5:04:eb:66:67:2f:6b:42:b0:19:
ee:12:04:12:32:e8:11:ff:c4:60:38:22:d2:94:f5:
28:b6:a2:80:4b:21:d2:88:5f:e1:4c:dd:f5:9b:74:
a0:54:fb:bf:3d:fe:50:f5:ca:13:5c:a3:29:48:4a:
30:54:8b:2a:4b:3c:e6:a0:ab:01:eb:db:84:23:f9:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1B:C5:5F:E6:E6:A2:B5:7B:66:59:4B:22:CF:D9:58:84:E3:61:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/f40e0e47-941a-3211-9018-ea3a5bb33892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl
X509v3 Authority Key Identifier:
keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:c3:57:44:68:01:5d:e9:d2:06:63:c4:99:e9:4d:99:6a:74:
58:1b:65:bb:ea:64:40:24:c5:08:91:9d:1b:01:7d:6f:07:cb:
07:38:49:c5:5e:a0:38:71:31:38:15:be:fe:ae:f2:ce:ea:4e:
da:74:75:c2:9c:c7:2e:f5:2a:ff:da:d1:d2:ac:15:f0:da:1b:
52:8e:2c:22:a7:2f:7b:d0:56:2d:1a:dc:2f:7b:e6:83:ff:05:
11:4b:7e:2b:d5:f0:d8:f8:b9:0e:f7:2d:9f:7b:84:38:5d:e4:
88:00:cd:39:b5:32:07:56:12:98:c3:79:63:c0:82:1a:9b:1f:
fb:2c:16:bc:93:fe:70:9b:b6:a0:db:c7:a9:c5:45:69:47:77:
08:d9:9e:b3:21:2a:d8:40:09:07:66:e1:7c:a3:8c:52:b7:c8:
bc:7c:37:9d:20:70:79:70:e4:22:6b:82:42:9e:84:f7:58:40:
47:cb:8c:67:9b:73:1e:61:49:10:8a:a5:09:5b:99:9f:48:f7:
40:57:4a:34:42:4b:af:a9:46:4f:a1:f8:c4:fc:0a:3b:52:f8:
96:52:ad:26:c0:27:5e:62:01:5d:88:2c:3e:e8:a5:a2:34:6b:
5d:e5:7c:2e:2e:fb:af:75:46:f1:cc:8e:b2:f5:6b:22:cc:bb:
83:1f:18:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:39 2025 by rpki-client on console.sobornost.net