Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa
File: b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa (raw, json)
Hash identifier: QaHeH0xADWFIb4iu5F+IiPCXdX+gRmcKtUFqZhvGbpM=
Subject key identifier: 7B:E1:6D:73:50:84:30:8F:BD:ED:65:F6:80:DA:EA:A4:88:1F:51:4D
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F432858497DA4709F33C147579E0EB200
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 14061
IP address blocks: 159.203.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a4:70:9f:33:c1:47:57:9e:0e:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=e6188a65-743a-4f38-9c57-4d719122bb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c9:0f:9c:60:2b:4b:ff:45:00:7f:b8:08:bd:
62:46:22:74:ee:e3:da:c2:de:b6:46:d7:30:6d:61:
be:41:a0:a6:62:36:3f:63:59:f8:0d:f0:bc:7c:b3:
da:98:54:89:01:68:c5:86:95:43:81:34:76:46:c2:
eb:47:aa:75:5a:a8:25:f4:a2:3d:81:76:86:f3:1b:
03:96:14:ca:93:70:18:3e:80:58:19:33:88:31:ad:
91:3d:52:dd:dc:e9:92:42:aa:3a:19:e8:c3:fe:e8:
1a:fd:d2:de:57:e0:63:56:4c:ce:3d:3f:8c:95:91:
1e:18:53:6e:82:c3:53:f2:54:94:96:0c:ce:6d:b9:
6b:7f:b5:2e:47:53:8d:bf:a3:1a:93:16:80:fc:f1:
3a:97:65:ed:09:19:c8:8a:1e:17:1d:e6:87:0b:c6:
19:66:d0:ca:a3:eb:19:26:43:c0:2c:2d:8d:0d:60:
6b:09:97:5c:4d:b3:28:79:8e:e4:6a:7c:70:d8:cb:
ec:bd:69:31:5b:ac:06:91:ed:6b:80:31:f5:f1:c0:
d5:a3:31:1c:38:15:b3:7d:84:a5:5f:dc:7c:08:79:
68:1a:4c:3c:75:5f:ec:8c:8b:02:3d:09:ea:0d:b6:
f3:87:e0:9a:cf:02:82:10:73:de:55:7f:38:69:b1:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E1:6D:73:50:84:30:8F:BD:ED:65:F6:80:DA:EA:A4:88:1F:51:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/b8855cc3-4f87-3db2-bb0c-0cb93262ac92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
159.203.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:7e:82:d7:5a:6b:46:0f:d7:45:62:93:25:6c:f0:b0:95:7e:
45:03:54:0a:15:82:12:33:31:33:f8:ac:3b:7f:cc:1b:b0:20:
8b:1a:18:9b:25:ff:99:7f:a4:fb:b0:0c:2e:cd:9c:e7:23:23:
ec:46:35:66:82:fe:9c:8e:fd:45:32:29:46:05:71:f8:b3:b5:
63:9f:57:85:d8:49:b8:ac:75:9a:3b:cd:14:1d:0b:01:17:59:
c7:a3:7d:4c:dd:a1:a1:da:e2:d2:b5:78:81:89:73:c2:40:f6:
0e:08:69:e0:de:f9:15:2e:78:07:ce:22:89:f6:11:3c:f1:6f:
db:cf:6d:de:02:2c:61:af:a2:36:f8:49:c3:0d:4a:b0:23:79:
76:9e:5c:5f:bd:6e:f1:13:1d:41:a4:ff:4d:64:16:83:9b:cb:
e2:cb:1d:71:35:92:d7:5a:49:f8:d0:aa:ae:d7:81:3f:3f:e3:
90:8c:63:9b:37:b8:41:a0:31:67:55:44:50:ff:5c:72:3a:17:
05:d9:80:c8:41:d3:57:ea:11:c5:86:cd:c4:28:69:c2:1a:3d:
5c:21:3c:88:c3:88:b1:f6:81:29:a4:8b:2d:3d:3d:bb:a5:51:
dc:67:77:da:47:90:b4:5c:87:f9:2a:96:a4:29:89:be:0e:7b:
7f:3e:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:43 2025 by rpki-client on console.sobornost.net