Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa
File: f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa (raw, json)
Hash identifier: sKsvM6YubzO5eXQhVCV7slY/QnKWZinXDahVx5MRns0=
Subject key identifier: 5A:AA:27:E6:1E:10:34:B9:78:CB:BE:33:90:FE:12:DE:B9:92:A8:97
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584921840C11857C71B1E6D20300
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 174
IP address blocks: 149.143.128.0/22 maxlen: 22
149.143.132.0/22 maxlen: 22
149.143.136.0/22 maxlen: 22
149.143.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:0c:11:85:7c:71:b1:e6:d2:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=ef4ed6e5-835e-4a99-965e-28205099b392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:7a:74:50:0d:02:d3:02:02:00:87:d1:92:
00:bb:c6:89:08:a2:b2:6a:1a:9b:b9:b3:b2:aa:9e:
a5:1d:1b:26:0b:b9:1b:76:30:a7:6a:fe:ef:50:ee:
97:17:ad:02:cf:0a:d6:cf:d9:a5:74:59:9e:bb:40:
86:d7:b7:ba:88:9b:83:e0:60:01:dd:c6:4e:1c:9f:
dc:01:81:a0:9e:5c:2e:fc:d0:5f:df:e9:33:f0:20:
28:c3:d5:98:3a:2b:ea:f9:3d:b1:11:b3:29:eb:58:
65:81:da:3c:f7:62:ae:5f:5b:20:d8:27:ef:20:16:
e6:bd:66:1e:ca:3b:8b:f7:7f:2f:66:da:18:0a:5e:
6b:a4:9e:5e:18:ce:9b:35:d7:16:fe:da:19:81:a1:
c5:8a:11:ba:47:21:f8:e2:56:af:e3:7c:66:89:55:
9a:69:a4:54:e8:8a:c6:52:14:f6:a0:e0:13:3e:55:
ec:74:ff:fa:e3:6b:4d:ed:2d:fb:e0:ff:c6:68:a0:
31:1f:dd:fc:c5:c9:f1:c9:ca:a4:7c:71:5a:45:ba:
2c:8b:90:74:18:c6:f8:67:7e:06:dd:e5:0e:6e:67:
bf:d6:97:07:cd:7e:6a:1e:9d:5a:ce:9b:e2:c2:13:
ec:5d:01:5f:e1:66:b9:8e:7c:c2:8e:98:aa:4f:8a:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AA:27:E6:1E:10:34:B9:78:CB:BE:33:90:FE:12:DE:B9:92:A8:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:1e:b8:68:e0:27:5b:c1:c4:56:f8:56:30:86:40:94:e1:9e:
8f:cd:1e:2b:03:c2:50:37:99:5f:00:00:5a:ff:22:ae:f8:8b:
92:fc:c5:33:f8:e9:13:6a:7e:b7:65:2e:11:d3:76:17:4b:dd:
35:e1:89:d3:98:74:b2:74:82:80:0a:20:34:d5:00:80:95:31:
27:f4:b0:9f:bd:0e:2d:51:c3:9c:f4:35:17:5f:f3:1d:d9:d0:
29:e0:4d:9d:02:44:e4:ec:9a:cf:b3:e0:b1:b4:01:4b:84:09:
1a:1f:fd:90:26:d5:62:0d:8a:1b:4c:26:83:4f:0f:4a:19:d4:
2c:bf:83:c8:e8:75:f0:e4:69:71:c1:28:3b:b3:fd:c8:9e:66:
93:67:ce:0c:47:27:a5:49:54:b9:1d:c8:05:b5:86:e6:74:28:
0f:a3:3b:87:e6:98:d7:f9:3b:15:61:71:cc:e6:b3:8d:a1:5a:
c9:ee:3b:62:33:01:02:c8:04:d2:fb:6f:fd:57:28:83:6c:2e:
b5:b1:5e:f5:79:1f:d9:0b:51:bf:7e:e4:ee:67:d9:d7:13:ea:
9c:16:ca:81:a0:98:df:0a:fe:97:32:d8:b2:d7:96:a1:1c:69:
7f:68:9d:2f:3a:63:8d:f0:c6:65:f1:af:b8:b1:ca:bf:87:e3:
c5:ca:38:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:24 2025 by rpki-client on console.sobornost.net