Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/a112e6f1-5989-3baf-baab-bc4c1df7dd87.roa
File: a112e6f1-5989-3baf-baab-bc4c1df7dd87.roa (raw, json)
Hash identifier: pbWjCZnlcftH1w+ie/pCv2GWnHyvL3ctozE3btnSs+o=
Subject key identifier: 86:40:64:04:86:7F:B2:F1:24:90:7A:82:52:BD:1A:2A:DF:1B:94:94
Certificate issuer: /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial: 010D0C9F43285848DC9AD998BDB1DD418242C640
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/a112e6f1-5989-3baf-baab-bc4c1df7dd87.roa
Signing time: Wed 12 Feb 2025 20:36:44 +0000
ROA not before: Wed 12 Feb 2025 20:36:44 +0000
ROA not after: Tue 13 May 2025 19:36:44 +0000
asID: 16509
IP address blocks: 205.233.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dc:9a:d9:98:bd:b1:dd:41:82:42:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Validity
Not Before: Feb 12 20:36:44 2025 GMT
Not After : May 13 19:36:44 2025 GMT
Subject: CN=279a3d06-23ca-49e2-b9b6-d7871d2944f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:13:b8:57:74:c1:57:7e:fa:7a:ad:04:02:
09:8b:0d:74:98:4e:f5:6d:4d:a1:72:03:9d:87:ea:
67:d5:e0:62:b6:3a:94:2f:52:13:0f:79:a5:49:bd:
c4:57:8c:1a:ed:83:53:97:09:cd:6d:f7:cc:f1:65:
cd:2a:b4:62:d4:47:ad:01:47:81:bc:e4:4d:8c:0b:
70:18:2d:1d:6c:b3:d6:35:84:5d:80:bb:72:95:6c:
4c:c8:6b:e9:1e:51:1d:0b:b9:21:ff:96:53:bd:e8:
01:e1:43:14:92:ae:d7:77:41:6a:e5:d5:e8:59:8b:
fd:19:85:27:73:a8:cd:82:73:8a:e7:a2:59:6e:14:
4d:57:9f:39:87:fd:e2:c4:29:2a:cf:2f:3b:21:50:
55:75:d0:b5:89:cf:3c:24:35:cd:6b:75:a1:84:ae:
2f:93:41:d7:fb:c6:96:88:4e:fd:ae:21:06:89:b9:
88:de:14:22:bf:6c:62:1e:c5:90:19:61:64:49:b0:
bb:5f:70:af:62:aa:5b:ed:61:f8:84:3e:56:42:3d:
9f:12:21:0b:f4:5e:6d:49:25:a9:71:80:6e:00:88:
60:14:b6:0b:b3:36:95:43:ab:d0:27:5d:10:ba:2c:
22:a2:9c:63:12:97:46:77:21:d2:db:78:95:28:84:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:40:64:04:86:7F:B2:F1:24:90:7A:82:52:BD:1A:2A:DF:1B:94:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/a112e6f1-5989-3baf-baab-bc4c1df7dd87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl
X509v3 Authority Key Identifier:
keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
sbgp-ipAddrBlock: critical
IPv4:
205.233.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:b2:e2:ff:f1:cf:f8:13:01:52:79:02:08:24:d4:92:48:a1:
94:42:d5:08:e6:45:9c:f5:2f:d0:79:25:b0:9e:dc:a8:89:4c:
49:13:8d:67:ff:c1:54:9f:7c:a1:a8:0a:42:f5:97:8c:48:52:
23:c6:c2:a7:e6:36:0b:af:2a:7b:68:50:50:e6:12:74:f4:ee:
9e:49:f9:48:32:19:3a:34:aa:37:b1:88:81:fb:13:82:2d:b8:
32:a6:90:0f:12:65:22:93:63:19:79:ac:82:2b:7c:f2:dc:6d:
df:15:ef:35:7a:42:cb:fa:61:9a:b2:73:a2:a0:5e:24:1d:84:
5a:07:ce:c3:39:49:58:c8:04:9a:e0:5a:f7:d1:25:69:03:02:
12:57:a3:92:ea:fc:b1:24:ee:54:3f:d8:a7:23:17:c6:f7:20:
06:9f:54:85:ec:10:1b:ea:69:bd:53:29:12:8e:dd:45:f2:66:
b5:53:d2:97:c4:46:c7:a6:d8:27:b8:e2:3a:fe:63:77:24:db:
8c:71:48:20:64:67:42:8d:d5:b0:2f:fd:c4:2d:79:ae:a4:88:
5e:c5:47:ab:81:7b:54:a4:20:81:15:e8:d7:10:3a:e7:09:46:
2d:28:63:70:ac:fa:70:31:74:84:a6:83:b1:46:3c:a1:28:6e:
17:48:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:33 2025 by rpki-client on console.sobornost.net