Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/4197acd6-1432-3319-babe-3a616a1afcaf.roa
File: 4197acd6-1432-3319-babe-3a616a1afcaf.roa (raw, json)
Hash identifier: Qkbd/a/4qgcx57ikDhFOOUwKF/BKlnWG2WiwqrkDb/A=
Subject key identifier: 69:9D:6B:00:E8:7A:51:CF:DA:A0:17:0C:24:50:09:48:22:61:57:00
Certificate issuer: /CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f
Certificate serial: 010D0C9F4328584902EC14A69585D54BB715D43C
Authority key identifier: 9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/4197acd6-1432-3319-babe-3a616a1afcaf.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 55082
IP address blocks: 198.135.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:14:a6:95:85:d5:4b:b7:15:d4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=1f10d04c-d24d-43e9-8d9f-f971485c2934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:9f:ba:f1:ae:fa:a6:0d:1e:a2:53:6a:65:
f1:d4:fa:c4:a0:e9:db:69:19:3d:f6:58:f2:55:f5:
56:b1:55:ff:4c:30:2b:b4:f0:e8:85:49:28:53:20:
ec:54:53:fc:1f:1f:2a:52:05:18:72:06:34:37:44:
a9:ae:54:8f:0b:cf:24:95:2b:9f:0e:b9:40:53:f5:
d4:c8:9d:7c:03:29:b5:53:d4:ec:12:a4:ce:14:8c:
0a:d4:e4:e0:29:ba:df:04:d5:36:b7:1d:49:91:ed:
5e:a8:7a:c4:60:87:28:ef:94:72:6c:d6:08:79:01:
c1:27:31:f6:33:9f:aa:90:e0:58:35:c7:41:86:00:
83:95:fe:a3:c9:0c:db:bd:cc:2e:ae:98:58:02:d9:
b8:bd:a2:c5:95:e7:b4:da:25:0a:1d:c8:04:75:08:
aa:96:49:a5:ce:08:91:a4:f9:18:1b:36:2f:f5:d0:
21:b7:e1:dd:45:12:fd:75:0e:da:e2:31:89:24:6c:
6e:82:6a:46:5b:e6:62:9b:5d:68:4a:b7:c4:19:5a:
85:52:38:ff:38:a8:62:53:c5:7e:b8:0d:44:7d:80:
97:06:87:05:3c:01:5c:e3:96:ce:bd:e4:09:02:8a:
09:ee:0c:9d:43:dc:76:fe:70:bf:8d:cf:79:c2:d9:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9D:6B:00:E8:7A:51:CF:DA:A0:17:0C:24:50:09:48:22:61:57:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/4197acd6-1432-3319-babe-3a616a1afcaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.crl
X509v3 Authority Key Identifier:
keyid:9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.135.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:89:4c:3e:b8:5f:b3:55:a3:a1:15:db:96:d7:90:97:48:88:
c0:6c:4a:c9:67:f2:28:be:76:6d:5a:80:dc:10:ed:50:50:9f:
19:31:04:93:8a:74:ae:43:0f:51:69:47:d5:e0:2d:57:0f:53:
1d:c9:ed:4a:a2:4b:68:b8:01:ac:51:77:92:27:35:fe:22:a9:
f5:0b:ad:7e:d6:02:7f:03:8b:10:26:22:eb:8f:b7:b4:c3:02:
35:70:8c:03:30:fb:8f:58:6c:68:59:d0:ba:db:5a:c4:be:ca:
3e:c0:aa:bc:f4:90:10:16:bf:c5:39:0d:3e:69:1f:4d:68:c1:
b0:a4:0d:43:cf:6a:5d:27:e6:d8:8a:65:eb:af:03:a9:71:4f:
80:00:57:d0:31:d2:44:ec:58:c6:88:84:e6:f5:c2:23:89:58:
91:2c:11:35:dc:33:1f:95:48:f4:9a:e8:e1:52:3b:57:a4:46:
c8:2a:61:f6:cc:ab:57:e3:4c:b5:ae:e3:17:44:b4:5b:45:df:
d9:0b:d5:8f:19:d9:dd:9c:07:4e:53:ab:50:0d:dd:02:2d:0a:
04:bd:73:92:fc:d5:b6:4f:ea:ae:77:5a:de:60:de:51:11:2a:
26:e4:d1:fb:da:58:12:ab:9f:98:aa:5f:b1:b5:08:fe:7c:65:
f3:de:d4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:02 2025 by rpki-client on console.sobornost.net