
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
File: 8b8a85b0-e152-340d-9552-d571b618a288.roa (raw, json)
Hash identifier: T6FKgR9Ou+o2xvaY2wACanYyoRDAIk3wHvgEk6aeQZc=
Subject key identifier: 4A:92:D6:77:7A:61:E8:BF:E7:E4:30:F2:31:0A:FC:D4:E7:25:E0:C5
Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial: 010D0C9F4328584919418DA8F429E60EEB490880
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 30158
IP address blocks: 199.189.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:8d:a8:f4:29:e6:0e:eb:49:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=7df05be5-c6ca-4f8a-a9bd-f5e139062493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:a4:2f:45:be:a7:5a:0d:57:0b:b6:26:a1:
e5:1a:19:19:9e:ae:18:12:a4:02:a9:7e:96:1c:e1:
ac:a5:69:d4:91:f8:1b:5b:a2:e3:33:b1:66:81:cb:
0b:d3:69:62:5a:18:72:01:85:b2:55:98:8b:db:09:
2d:72:ca:36:6f:ee:87:44:81:e8:44:52:ad:0e:a7:
56:c7:a8:f4:eb:8d:e8:e5:9e:6c:94:a2:1a:07:c6:
29:b4:0f:6e:1a:e6:a4:e6:e1:a6:fb:92:c9:f8:45:
c1:b8:3f:8b:8a:da:0b:42:e6:9a:6a:9a:5c:ca:d6:
3e:3e:32:9c:3a:a7:97:ea:50:e0:ba:b5:f3:73:38:
86:ab:34:fe:f8:a7:d3:ba:65:02:41:da:7c:27:c7:
ea:c8:45:24:6f:df:f6:b5:0f:4f:43:2a:0a:3f:05:
b8:18:88:a9:fc:33:b6:85:d9:d2:5c:06:f6:1a:3c:
31:b6:54:20:70:2a:19:21:18:a5:34:be:ea:21:ac:
0e:2b:f2:72:48:30:79:49:32:57:b1:fd:70:d3:48:
69:e5:0f:7d:a2:24:f9:5e:8a:38:11:c0:da:e8:76:
43:39:a3:2d:3b:87:3b:51:86:b3:02:f1:e2:5c:00:
13:a7:bf:1c:8d:cf:80:28:7c:70:2c:e6:88:bc:28:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:92:D6:77:7A:61:E8:BF:E7:E4:30:F2:31:0A:FC:D4:E7:25:E0:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
X509v3 Authority Key Identifier:
keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
sbgp-ipAddrBlock: critical
IPv4:
199.189.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:e7:d9:4c:55:3d:11:d3:42:b7:0c:d9:b1:c4:b1:ff:e2:6e:
c5:65:0d:2c:9e:7b:11:84:00:d7:13:e0:a2:c5:1b:50:09:9d:
a4:a2:66:4e:21:f7:df:48:7b:c7:b3:1e:a4:5d:a5:db:ee:6c:
b0:ee:e9:c5:e8:e2:cc:70:ce:d6:58:d5:3e:92:da:08:bc:47:
6c:99:d7:46:5a:c8:68:81:8a:98:42:8d:16:73:ee:5c:49:b2:
c0:49:d7:e4:07:88:7f:90:8c:d3:f8:e0:7a:a4:58:85:ed:5d:
f2:e8:6f:35:5a:a9:c2:bc:22:31:24:22:b6:12:f8:87:b1:fc:
09:3a:7e:11:03:b5:98:06:89:73:73:c7:69:2b:a6:18:62:69:
2c:0d:33:d7:a2:27:36:4e:4e:bc:ee:91:8c:36:09:d6:f6:a8:
35:19:89:d6:78:7e:70:0a:e2:65:8f:a7:07:dc:7e:f5:2a:0e:
87:75:15:53:e0:d1:dd:bb:22:1a:d2:76:c1:9b:8c:69:a1:12:
d8:fc:4e:59:87:f7:44:07:e8:21:f1:9b:82:d5:4f:21:d8:ad:
c4:b7:e0:1c:cb:c3:f4:33:12:ce:ea:f3:32:c8:84:ab:0e:fc:
be:8d:fa:ed:1a:11:2d:20:b3:99:82:b8:6d:05:71:87:ea:1c:
a5:e9:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:02 2025 by rpki-client on console.sobornost.net