Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa
File: 8f21fddd-8bf5-3217-a480-686fff06115a.roa (raw, json)
Hash identifier: mbZcDvAD+zGxqInBLOM7/sLGQM0smzDoKzmOpnIAU04=
Subject key identifier: 92:DD:B8:8B:5C:F2:0B:11:1F:AE:A0:00:21:7D:BB:63:BC:AF:D9:C1
Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial: 010D0C9F43285848E2D1110470927DDCCF94A580
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 1403
IP address blocks: 199.58.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:11:04:70:92:7d:dc:cf:94:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=095c3614-4fbd-438d-9d01-d199194898da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:8a:a8:2e:24:d9:4c:ba:2f:ca:cb:a3:c7:
f0:93:50:52:30:c5:90:3e:46:80:34:31:2a:f7:b9:
57:5b:1d:bc:31:30:e7:14:bd:ea:13:9b:8e:85:3e:
a4:4d:da:02:b0:ac:34:b7:b7:3c:93:db:83:3b:88:
7d:34:81:a4:1e:32:72:93:8c:af:d4:c6:e6:2c:02:
eb:40:16:99:0c:6b:7d:78:37:96:23:2c:e4:1f:c5:
52:61:a5:6c:c3:e3:ec:34:b9:0c:78:80:b5:3c:e4:
18:0c:f6:c2:bd:8b:71:22:3c:46:48:94:87:7b:48:
f7:a4:bc:49:76:b0:41:a8:c3:d7:a5:a4:47:21:f8:
89:74:e7:b3:3a:e3:e3:2c:dc:0f:8d:48:e9:da:82:
69:65:49:11:76:a8:05:a6:0f:1d:b2:d6:09:ce:58:
24:71:a4:b6:ba:05:da:b3:97:68:b7:de:b2:ad:97:
2a:e0:86:ea:da:16:76:f3:27:1d:43:ec:cb:77:98:
8f:fa:bb:0b:cb:4c:eb:fc:ea:b2:75:60:6c:b1:e4:
de:c4:2b:f7:2b:82:ac:f4:a4:5b:e0:d9:32:9d:b9:
9e:8e:16:08:52:55:7a:cd:32:28:d0:5c:07:c8:90:
6a:c6:8c:1b:16:d3:12:c5:22:bf:46:d3:fb:ce:99:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DD:B8:8B:5C:F2:0B:11:1F:AE:A0:00:21:7D:BB:63:BC:AF:D9:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
X509v3 Authority Key Identifier:
keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:64:8e:67:c6:5c:e4:6b:1a:43:93:f8:f6:67:3a:2f:29:d4:
75:b7:73:94:1c:72:dc:7a:d4:9c:45:2c:b8:14:14:83:e4:1b:
ea:f3:ce:c9:ca:e5:a2:76:20:a2:f2:3d:8d:5a:d5:de:2f:37:
4a:08:f2:a8:b4:c6:89:b3:57:63:7d:47:80:48:43:c3:fc:89:
27:3f:34:c9:d5:79:1d:11:59:ab:fb:6e:b5:ac:ba:f9:66:b3:
85:10:e8:39:6c:b7:ee:ca:5f:95:ef:4a:f7:bf:59:db:00:ac:
8a:54:87:7b:52:ad:fa:7b:fe:f9:87:76:0f:43:81:8d:4a:8a:
52:60:98:02:8e:33:aa:54:14:d0:af:10:1a:8c:d7:9d:9d:3b:
ff:62:5a:6c:4e:ec:c2:d5:25:9f:0a:bb:8e:e3:0c:84:38:9d:
f2:aa:03:f9:a6:c0:bc:73:d5:21:d8:f2:b9:a0:88:7f:4e:42:
b1:11:49:38:6b:71:8b:87:80:e2:7f:bc:a6:1f:d1:3d:4c:e5:
29:c4:b1:81:02:8a:0b:63:bc:31:68:bb:72:32:47:00:b6:d5:
3b:b8:25:34:97:3f:ab:01:76:63:e0:a5:00:0a:2b:19:ec:ad:
96:8d:f0:e1:08:76:29:e0:ca:5a:95:0f:95:e4:59:7f:c6:19:
be:fb:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:10 2025 by rpki-client on console.sobornost.net