Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa
File: 5368e9b8-712e-3eaf-a366-757c94d5124e.roa (raw, json)
Hash identifier: K0/cXInkfzb4AxkowbA9ODpqI6oSlPNUijjAF9vLBno=
Subject key identifier: A0:EE:B9:B1:09:FC:44:AB:10:C7:E2:20:79:88:E3:29:D4:65:AE:8F
Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial: 010D0C9F43285849711431EC7272E236B3CF0500
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa
Signing time: Mon 07 Apr 2025 01:00:47 +0000
ROA not before: Mon 07 Apr 2025 01:00:47 +0000
ROA not after: Sun 06 Jul 2025 01:00:47 +0000
asID: 14618
IP address blocks: 199.66.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:14:31:ec:72:72:e2:36:b3:cf:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Validity
Not Before: Apr 7 01:00:47 2025 GMT
Not After : Jul 6 01:00:47 2025 GMT
Subject: CN=e5e21b70-068b-447d-9f1d-ecb3359865d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:b5:e7:f0:0c:5b:40:b9:77:b8:8b:28:dc:
38:b8:9f:bb:71:79:17:10:f7:07:c9:26:31:33:8c:
38:15:d6:ef:cf:a5:c4:82:87:21:d7:39:08:9f:6f:
b9:f2:76:78:7b:6c:cc:e4:f8:09:db:4c:93:10:bf:
2d:c9:de:d5:50:c6:d6:15:ba:0d:ff:5f:b3:c8:07:
3a:36:66:f8:91:cd:d6:ed:79:06:8d:f4:b8:4f:dc:
c1:7c:79:a9:f0:a8:7f:8a:bb:38:77:88:00:0b:fc:
81:3f:91:28:0e:2e:6e:ff:f6:2a:62:4f:3f:df:52:
8d:f3:77:b8:6d:b9:e9:82:b7:96:d5:d5:0b:34:65:
bd:40:09:d6:51:fd:72:7d:e3:dd:e5:6b:f8:34:3c:
cf:94:9b:a0:1c:96:ed:c5:7a:b8:81:54:1f:67:19:
c0:5a:7b:82:35:11:1e:ee:c7:04:5e:39:4e:fd:8b:
8f:00:fc:6c:30:f8:5c:f2:0c:f0:3b:d9:5d:28:1d:
8f:40:0a:0a:14:f1:dc:5d:9d:3c:e2:90:6e:25:88:
36:60:24:ab:ea:84:3b:d1:48:09:61:0f:5f:00:63:
a9:2e:d5:e9:83:e0:e6:c5:b9:50:07:46:ad:ca:95:
5f:58:73:fe:77:19:a2:9b:84:fb:40:0d:fc:56:b8:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EE:B9:B1:09:FC:44:AB:10:C7:E2:20:79:88:E3:29:D4:65:AE:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/5368e9b8-712e-3eaf-a366-757c94d5124e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
X509v3 Authority Key Identifier:
keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
sbgp-ipAddrBlock: critical
IPv4:
199.66.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:7d:cd:b4:f0:cc:d6:e3:3a:0f:45:ae:ef:02:98:97:a7:a9:
98:51:4a:cc:d8:05:a4:95:7f:7b:47:ff:d3:40:79:1d:7d:23:
33:fa:6e:cb:f9:d5:42:ad:e4:8e:53:34:48:bc:f7:0e:12:8b:
31:2a:9e:7e:31:7f:0b:e4:af:d7:d8:f2:26:dc:8a:90:5c:c7:
d3:59:1c:8d:1b:7d:37:de:06:68:43:fa:8c:85:af:26:b8:a3:
79:d6:92:31:52:12:99:51:21:44:ce:af:93:42:f0:3d:aa:06:
88:59:ed:27:81:91:c6:4d:21:d7:8a:21:7e:1d:72:ea:ba:7d:
48:b3:a2:45:07:27:bc:8b:fb:59:be:d1:96:91:1b:1c:a4:69:
45:41:80:0f:44:2c:a4:b1:eb:47:23:f8:9f:9f:48:be:e0:a5:
90:86:a2:92:6e:9a:56:d5:ce:06:26:0d:a6:44:60:e2:a3:1b:
7d:d8:cb:d5:ef:3f:e4:9b:94:69:6e:82:13:63:b3:fb:2e:f3:
c9:8b:f2:30:0a:42:df:8c:e0:2d:ce:6e:eb:fc:e1:a0:09:77:
cd:15:d0:e2:af:e4:d4:f9:02:88:ac:33:24:71:9f:13:1a:3b:
c6:9f:c1:46:f4:3e:f0:6d:d2:3d:4e:71:d2:03:6f:79:66:62:
af:b0:e9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:33 2025 by rpki-client on console.sobornost.net