Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa
File: 9a8d9685-4393-3f04-898b-1b075a4b6c59.roa (raw, json)
Hash identifier: 5DZ44htpCienvXGnYlO05LFQPSB3dO6cexxaJnLjeXg=
Subject key identifier: 07:E5:44:88:80:3C:7C:6A:1D:50:A8:A3:C7:DF:0E:06:76:42:1D:41
Certificate issuer: /CN=3a033ee1-5d03-497a-8120-3969593cdf7e
Certificate serial: 010D0C9F43285848B4C0D4BEE41805E472109880
Authority key identifier: F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 21976
IP address blocks: 192.51.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d4:be:e4:18:05:e4:72:10:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a033ee1-5d03-497a-8120-3969593cdf7e
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=430a4bb2-78fb-4791-a563-c1728da03c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:46:64:ab:29:3d:dd:07:ba:7f:65:e7:e9:
e0:b7:2c:77:28:48:f9:48:e6:76:0c:8d:e2:0a:21:
cc:60:5a:a4:23:0a:63:be:80:cc:c3:d8:be:97:8d:
e2:de:44:85:ad:94:c0:8c:07:66:b5:e6:09:9b:1c:
b4:30:29:b0:6c:dd:f9:e0:2e:16:13:47:93:48:2a:
80:5a:3c:33:d7:78:86:8b:09:01:ee:5b:d2:27:b5:
a4:2b:22:f5:09:9c:99:fc:56:da:44:1f:d2:d1:9f:
64:24:4f:3c:e9:5b:5c:f8:e9:b4:6b:c4:8e:37:ea:
c4:7c:2d:66:e1:7d:6a:87:a0:f0:d8:53:a5:aa:ac:
a8:c5:8c:68:0b:9d:77:cd:4f:4c:df:ec:ad:26:11:
44:aa:83:ae:c2:72:3d:ce:91:ca:12:ba:b0:a4:40:
9a:cb:36:91:02:88:8f:7d:98:a0:d8:b9:de:a9:d8:
64:76:b4:69:68:98:c2:ec:cf:bb:06:5d:2e:cc:df:
89:29:70:5b:ea:12:ee:3d:d5:37:aa:d0:93:7e:21:
a1:27:aa:cf:9d:52:49:74:a0:8a:94:73:3d:22:51:
df:29:f3:d5:06:65:5b:ba:41:98:0e:90:b4:ff:23:
4e:4a:a4:ec:46:60:10:60:bd:47:37:f4:2f:93:81:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E5:44:88:80:3C:7C:6A:1D:50:A8:A3:C7:DF:0E:06:76:42:1D:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl
X509v3 Authority Key Identifier:
keyid:F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.51.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:15:4b:21:4e:e5:69:45:05:94:4a:3b:98:b2:8b:3d:83:da:
37:b8:30:89:15:44:e7:16:f3:d0:91:22:10:be:db:e3:8d:30:
90:5a:2e:36:d2:23:53:5f:f7:08:17:39:e5:09:95:79:83:9c:
40:20:82:8b:2b:4a:de:48:6f:3c:4f:63:17:63:a2:bf:45:ed:
ff:15:79:3f:d7:db:f7:11:2e:87:4f:c7:5e:4e:21:8a:9d:20:
b1:ee:4c:08:73:29:df:94:45:70:c7:00:79:58:ca:0e:4a:25:
9e:df:fb:72:ce:ae:37:18:a6:6f:9a:e6:e6:b4:4c:a4:33:67:
9a:e8:77:5e:f9:15:db:26:05:9d:82:dd:cc:5f:5b:42:2a:bb:
4e:75:3a:ed:14:86:bc:8e:ec:52:05:ca:e8:39:1e:29:6a:ea:
16:af:8c:af:60:21:6f:aa:81:40:8f:f2:80:4d:a5:53:45:19:
33:17:af:98:84:b3:61:ba:47:6a:9a:81:e2:9e:f7:d3:61:65:
fa:ce:9b:27:9b:ef:5c:17:d1:a8:04:a5:b6:26:6c:af:eb:e2:
4b:b2:56:56:f9:84:04:01:25:54:e3:a0:cd:75:49:77:9c:dc:
64:62:3c:97:19:c5:8d:74:11:d2:46:a2:3a:44:3d:a2:9d:a8:
fd:f3:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:02 2025 by rpki-client on console.sobornost.net