Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa
File: 9bd82531-e23a-32e9-a00b-bac423c66412.roa (raw, json)
Hash identifier: KNWRwfEiUWDhzeEc4clZX+ASoTxXWhWMJP79dGDWqK8=
Subject key identifier: 4A:B1:97:FD:59:72:10:12:E6:61:9F:F9:C8:3C:20:FF:F7:D8:EC:00
Certificate issuer: /CN=23c7fd31-20a5-4b68-a62a-88cba184f1be
Certificate serial: 010D0C9F4328584917DC313A18475A15F2D6BF00
Authority key identifier: EC:D4:DA:74:03:90:9F:29:73:CD:8F:80:02:71:19:0B:03:C7:9B:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 29696
IP address blocks: 162.249.48.0/21 maxlen: 24
199.34.14.0/23 maxlen: 24
199.200.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:31:3a:18:47:5a:15:f2:d6:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c7fd31-20a5-4b68-a62a-88cba184f1be
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=33113091-e531-4118-9e40-7822e1a0f625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:83:f6:6c:15:9e:09:86:21:66:fd:8a:ed:
83:4f:01:2a:7a:dd:43:bd:82:c7:6f:42:04:a6:7d:
19:d6:e6:f3:cf:30:69:66:b9:e2:50:9e:57:f3:d2:
dd:71:f5:ab:9b:7d:d0:0c:e1:6a:72:98:2f:b6:d3:
6f:66:79:69:41:67:7d:ef:9a:46:19:c9:d7:14:3d:
5b:56:ff:31:f5:86:99:ec:d1:77:78:1a:17:9c:a3:
ee:67:c1:d0:12:45:10:ea:fa:20:1d:72:b5:34:4d:
19:e1:71:68:8e:a9:66:ca:db:69:86:6b:52:8d:b2:
df:63:1b:eb:71:fd:a8:34:b4:7e:e2:07:79:c2:e4:
fd:15:c3:3d:7b:1a:7d:e3:69:ef:a3:0c:e5:18:47:
18:63:e6:6f:1f:e8:e6:ae:b2:ca:d1:ba:9a:05:18:
98:e0:a8:4e:11:d0:a1:b3:b0:03:8d:b2:ff:db:f4:
5d:2a:8d:0b:93:9f:b7:c8:04:9c:3e:e9:ab:fb:c0:
da:d8:f5:3e:10:dc:dd:5e:ec:d1:3d:be:b9:da:03:
be:5d:7d:8c:a6:d9:79:5b:5d:22:38:5b:88:21:ce:
fd:8c:13:a6:77:23:fb:cb:14:91:f5:58:2d:29:bb:
84:7e:e5:2b:87:75:58:8e:eb:75:0d:d5:61:ff:49:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:97:FD:59:72:10:12:E6:61:9F:F9:C8:3C:20:FF:F7:D8:EC:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/9bd82531-e23a-32e9-a00b-bac423c66412.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be/23c7fd31-20a5-4b68-a62a-88cba184f1be.crl
X509v3 Authority Key Identifier:
keyid:EC:D4:DA:74:03:90:9F:29:73:CD:8F:80:02:71:19:0B:03:C7:9B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/23c7fd31-20a5-4b68-a62a-88cba184f1be.cer
sbgp-ipAddrBlock: critical
IPv4:
162.249.48.0/21
199.34.14.0/23
199.200.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d7:7a:1c:7f:d8:6d:3f:91:6e:83:ef:9a:6b:06:4e:98:84:
d8:10:30:d0:2c:fd:c5:65:12:19:bf:3a:d5:b5:fe:7e:1a:ec:
97:23:7b:29:aa:b7:f2:12:5c:61:42:31:17:34:9f:57:ba:62:
61:fc:a6:f6:de:e9:2d:1f:89:3c:3a:39:d2:75:c3:1d:82:5f:
75:8d:3b:74:e8:80:48:5d:c6:11:59:f8:06:cd:8d:8d:5a:7a:
72:a4:c2:4a:64:5d:8a:3e:50:0c:b9:68:ab:1b:71:8a:05:04:
1c:62:06:fa:51:16:27:ae:31:9c:64:81:db:52:61:5f:49:86:
10:52:73:5e:f6:57:8b:bf:10:b1:73:6f:92:bc:f6:ba:10:dd:
16:85:85:19:c7:61:f6:46:b0:f6:63:18:c7:7c:02:d7:91:8b:
10:ff:0f:79:55:27:aa:ce:88:a6:d2:db:61:00:a6:f1:77:70:
37:eb:34:07:9c:4e:83:ad:a8:48:e4:76:be:4d:0d:68:93:6a:
62:5a:ea:19:b9:7c:58:ab:21:24:0c:2c:e2:89:59:0e:49:47:
2a:ee:23:b9:24:c3:b1:48:13:84:25:8a:f0:0f:84:28:eb:7c:
29:be:a8:6e:c7:cf:96:23:e2:72:ed:1f:79:f8:21:04:f3:5f:
23:2d:8f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:33 2025 by rpki-client on console.sobornost.net