Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa
File: 0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa (raw, json)
Hash identifier: Ob26cAwwpy2cgNViJdP61GKCiucelfUJvcZachhs4EE=
Subject key identifier: 2F:6A:B2:31:94:E3:B6:11:A7:89:AF:80:2E:3B:F4:4E:5C:EC:BB:4D
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848D21142D2579ED0FFAAA32EA0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 51964
IP address blocks: 140.209.240.0/21 maxlen: 24
140.209.249.0/24 maxlen: 24
140.209.250.0/24 maxlen: 24
140.209.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:42:d2:57:9e:d0:ff:aa:a3:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=9074ede5-fc6e-4fa0-8d80-4460b69658a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:62:a6:25:58:db:37:bc:3a:7a:b3:ad:68:
cf:8a:b0:99:59:8e:5c:aa:4b:2d:32:8b:10:1e:61:
c6:88:7a:78:90:e5:7e:c2:f6:36:f2:a4:51:1e:13:
94:90:ea:b4:10:a2:18:c1:c7:79:39:68:f7:f7:17:
74:ba:e0:c8:fa:4e:c6:8b:57:a8:9d:ad:c9:40:f6:
1a:77:32:8a:f8:b3:ca:49:bb:08:d5:ff:69:be:75:
44:3e:09:5d:a0:1c:ac:81:d3:40:47:d6:df:39:24:
b8:c4:e5:38:b4:da:00:3d:7e:f2:89:c6:6d:36:35:
3e:65:b5:19:cd:a4:76:fa:9c:31:55:37:dd:78:81:
b3:9c:3d:8c:62:f9:68:1b:9a:73:10:c7:5e:5f:4f:
26:56:d6:3d:a6:df:47:c0:a0:36:0f:fe:e7:7c:8a:
85:f8:72:14:2b:de:49:23:8c:9b:29:ff:22:0b:ed:
a0:cf:2d:6b:50:49:18:f7:e3:99:78:88:92:e1:40:
c1:58:16:8b:2c:8a:e2:6c:96:6f:92:6d:10:2d:df:
c7:32:07:04:ff:27:58:16:2b:f6:fb:e8:c2:d8:85:
90:e9:94:a7:72:f7:67:98:67:da:24:f2:fb:75:43:
9e:49:30:38:cf:a0:58:28:e3:a7:06:54:49:89:a4:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6A:B2:31:94:E3:B6:11:A7:89:AF:80:2E:3B:F4:4E:5C:EC:BB:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
140.209.240.0/21
140.209.249.0-140.209.251.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:ce:79:a2:60:d5:a8:a5:0c:96:4b:24:b4:60:d6:d3:5d:a1:
81:fa:ac:84:10:1c:7e:d4:ab:36:15:bc:ee:5b:eb:a8:9e:97:
97:9c:6a:5e:8f:67:c5:3b:9a:b0:b1:4c:30:d8:6c:1b:38:2c:
7e:f5:41:4c:a7:1c:87:65:68:8c:f4:58:23:9a:57:78:34:a5:
f8:c9:67:9a:04:92:4f:0f:c3:cc:4d:f6:9c:66:26:8f:5b:0f:
d3:7b:b7:37:5c:79:ca:0c:98:ae:d8:4c:43:c8:d3:5a:31:a5:
0d:9a:09:89:6f:fb:73:66:5d:db:78:61:14:6e:5b:e2:04:f6:
26:3c:a6:18:15:52:68:06:32:d9:85:ac:d6:69:d3:ca:52:d6:
b2:b5:14:47:36:55:e7:39:f6:7b:80:0a:5b:2a:bc:95:55:fe:
27:ea:3f:12:da:58:dc:a4:b8:16:2a:e2:84:f4:7f:c9:48:ed:
b5:d1:c9:79:c1:22:57:c8:3a:b8:fa:ff:a3:93:87:99:12:53:
4b:a5:39:ed:6b:da:3f:b7:2d:e9:18:73:26:74:97:69:6f:d3:
aa:52:26:4c:71:e1:e0:24:fb:ee:63:7f:fa:ac:31:6e:ce:97:
06:c5:1f:a4:fe:44:2c:76:76:02:48:96:c5:05:a2:dc:1e:24:
9a:b2:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:40 2025 by rpki-client on console.sobornost.net