
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa
File: f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa (raw, json)
Hash identifier: URbDy4qguzVmkRROU5RPwIJu1fh+UiU7iFrsx/x+0PI=
Subject key identifier: 10:EE:FC:86:82:75:24:BB:AF:8C:27:02:EB:53:EE:DC:40:9E:3B:88
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848C84B9A2020E02FC1985F58C0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 28920
IP address blocks: 149.143.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:9a:20:20:e0:2f:c1:98:5f:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=89f35c84-c930-4596-8404-28bad206c72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c8:fc:fd:67:e8:20:cf:7b:36:0c:7a:21:e6:
f0:01:1c:11:87:e1:0c:9b:36:17:5f:dc:ce:74:e6:
01:39:4e:19:15:b5:99:12:1f:0d:41:c9:b5:c7:59:
0f:40:76:3c:fe:66:cf:ec:7e:11:7c:ca:13:e9:bd:
24:ef:55:8d:e9:05:48:e1:f7:0c:fc:a0:b4:12:34:
ee:4c:52:16:7f:ef:66:dd:17:b8:60:a5:22:af:68:
0e:8e:45:33:1c:be:57:c6:35:78:a4:c6:68:e1:35:
bb:70:2f:b9:80:66:71:21:8e:ce:8a:4b:78:5d:a0:
3b:04:5f:16:c7:23:0a:05:3e:4a:34:de:68:c6:1c:
de:c9:0f:61:69:44:44:18:73:46:9d:9b:c5:94:79:
71:2c:ec:29:f9:10:89:98:5e:06:d3:00:a7:25:77:
81:9d:f7:08:ee:68:2e:26:44:5d:66:ce:d4:6f:c0:
37:25:77:0f:cc:1b:06:d4:da:24:a9:50:35:7d:68:
0a:f4:60:8f:6c:77:6c:0c:9e:85:51:3c:7a:2f:32:
30:b2:10:04:48:48:d9:ea:c6:a9:0a:3c:52:03:dd:
cb:7d:68:a5:82:c1:33:8c:25:9d:50:e4:4e:dc:cb:
8a:5b:b7:ff:ce:2a:94:0a:ec:47:d2:e3:cf:dd:75:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EE:FC:86:82:75:24:BB:AF:8C:27:02:EB:53:EE:DC:40:9E:3B:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:08:5a:f5:f0:b9:8a:52:12:cd:b7:32:ec:64:3b:4a:35:47:
79:a0:c6:e2:fc:74:4b:59:d1:1f:d7:01:a0:8b:6c:66:2a:62:
57:05:f2:59:2d:ac:3f:b3:68:03:1c:bd:fd:52:bc:80:a4:c6:
0d:38:c9:1b:b7:0e:78:8c:b9:d5:8a:ea:a1:68:d0:99:80:9e:
f5:56:dc:fc:2d:03:34:13:8e:b7:62:8a:c8:00:b6:60:43:8f:
ca:65:7b:ec:4f:80:1c:43:7f:87:67:a2:ec:22:33:7d:64:47:
63:8c:c3:b0:d1:fd:f9:26:34:28:f7:b2:e8:36:2e:58:48:8c:
7f:92:e1:71:cd:36:61:39:55:50:a5:26:19:78:4d:0e:ed:31:
55:9a:29:d5:b0:a9:96:6e:9f:b7:39:6f:69:cf:09:3c:72:ac:
a2:51:ec:59:89:5a:a8:4a:3b:31:f4:41:7f:e4:b9:15:c7:d8:
5a:87:fd:c3:9e:1d:ee:e4:8a:0a:a7:e0:c9:96:dc:66:8e:a8:
d6:44:b8:b7:21:9d:f5:c5:73:5d:b3:74:57:18:1d:b5:51:45:
80:89:36:15:1b:bd:79:ce:10:54:99:e6:29:33:6b:5f:ac:10:
1f:fc:cd:7f:b1:37:4b:b8:e7:60:2a:a6:93:5c:14:bc:6e:6a:
5f:05:3f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:24 2025 by rpki-client on console.sobornost.net