Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
File: 09591a19-c6e3-3973-9499-51ef6efc847d.roa (raw, json)
Hash identifier: u1tvaU1okW/0aoJe07BEU1Tt+leBkvDnlocRF+y0Ccc=
Subject key identifier: 88:8A:EC:33:66:6D:78:9E:B0:FF:98:10:C5:DD:E9:F6:3A:6A:F7:59
Certificate issuer: /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Certificate serial: 010D0C9F43285848F65BE197CC2887227673F280
Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 0
IP address blocks: 206.41.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e1:97:cc:28:87:22:76:73:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=98e5d46c-4405-4c19-a268-b3039e02382f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d2:5a:b3:53:01:43:42:ea:97:4e:dd:81:bd:
29:85:12:11:4a:e2:ef:c7:2a:19:b7:ea:54:36:c5:
d4:cf:24:bd:b4:43:61:86:a4:2a:6e:57:70:a7:bd:
92:ba:0a:67:e9:e2:53:42:03:9b:37:33:f2:8d:d3:
bf:c9:d9:9b:c0:ee:b2:e3:76:e3:6a:66:f3:c9:91:
40:7f:81:d4:c5:19:d8:e6:b5:04:b1:a5:72:18:30:
a0:32:fd:9d:7e:cc:2e:b4:51:47:e7:4a:98:3e:6e:
32:9d:de:50:3b:b5:e5:fa:2c:85:e2:a5:c3:41:b8:
58:91:8d:a1:84:f2:82:3a:0d:f1:ea:8c:64:52:a9:
bf:68:3f:c7:ca:41:93:93:fb:51:d6:a7:4e:aa:d8:
c1:13:c3:6f:b0:c9:b5:60:05:f5:4a:e7:6a:2a:ab:
3a:4c:af:67:c9:36:32:50:5d:32:34:5d:79:ba:ac:
c9:10:22:5b:bf:25:3c:1b:ac:d8:b1:2e:2e:79:68:
51:42:62:43:69:92:75:a9:b2:94:6c:37:f5:e3:a3:
3c:48:52:b2:eb:bc:56:8f:f5:80:9d:75:21:5d:30:
87:84:8e:41:6e:17:16:59:3b:36:07:01:de:69:43:
bb:49:fd:03:72:8f:bb:d3:2d:48:4f:d1:a9:17:27:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8A:EC:33:66:6D:78:9E:B0:FF:98:10:C5:DD:E9:F6:3A:6A:F7:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl
X509v3 Authority Key Identifier:
keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:97:a3:4a:23:7f:5e:63:20:85:cc:52:2c:b7:96:95:0b:22:
ba:07:eb:d0:50:23:d9:e0:c9:78:39:b2:a1:70:67:f6:00:92:
51:04:2c:53:69:7f:a2:09:7f:cd:ff:d7:f3:5d:93:ef:bf:23:
f9:c1:bb:07:03:6e:85:6c:ed:e7:bd:c6:26:60:c6:06:0f:b3:
96:d4:98:51:de:81:43:63:96:4f:07:14:59:90:53:de:b5:47:
a3:68:1a:5f:df:f7:bc:b4:61:7f:d7:26:e2:89:ee:3b:d3:d2:
f4:42:5a:f4:bd:d3:28:10:3e:41:e7:0f:64:c2:ce:cb:4f:ad:
2a:cd:09:d2:ab:5d:b3:33:23:f3:58:ac:29:8e:33:4e:95:dd:
41:37:33:47:98:f0:4e:a5:70:c3:bc:63:9d:2e:5d:04:0b:7c:
26:01:f1:39:b6:c4:5b:d1:ad:e7:e5:0e:3b:9b:ec:57:40:6f:
65:54:8b:96:ea:32:83:db:5f:c6:24:2a:52:65:79:aa:27:03:
c6:4a:63:81:f1:54:16:b6:17:ce:6c:f3:bc:46:9f:8b:b5:e8:
6d:72:c1:47:be:2c:82:4b:84:25:45:90:4b:d9:a4:82:46:64:
84:53:25:24:0d:75:f9:00:89:79:72:ad:25:ba:38:1b:60:f7:
e7:95:97:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:18 2025 by rpki-client on console.sobornost.net