Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa
File: 5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa (raw, json)
Hash identifier: yI27H7EqdaTxw6H85aGFa2z3sIeny52FM/lZbFFCzCI=
Subject key identifier: 0B:CE:AA:8A:5F:9B:1C:25:33:D0:69:A8:CD:9A:2F:B6:77:50:56:6E
Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Certificate serial: 010D0C9F432858492E13BD6C18BCE182695A5BC0
Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 399409
IP address blocks: 198.203.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:bd:6c:18:bc:e1:82:69:5a:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=aeffb3ef-dd99-496a-96c7-36bd1e693f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:16:80:f1:92:47:f2:b3:da:86:98:0a:93:
23:fa:eb:1c:b2:5d:02:84:82:8b:1f:89:c9:df:b2:
d4:26:be:3b:1a:25:cf:bc:c7:31:8f:c6:97:1f:14:
3e:9a:fe:60:a1:a6:b4:ae:dc:1a:02:46:9a:24:43:
bd:4b:35:ad:43:88:fe:67:e0:dc:90:ed:78:0f:ed:
9e:a0:ec:ec:15:a7:9d:d0:f9:cc:74:d7:9b:b7:02:
d6:d6:78:cc:61:ac:87:14:77:c9:49:11:e3:4a:ac:
ac:74:c4:b8:cc:1f:01:75:79:90:b1:34:81:60:37:
d3:04:c2:26:9e:00:a8:e0:11:e0:50:48:89:e6:3a:
41:62:8c:fe:28:2d:59:b3:8c:cc:ce:9b:07:64:a2:
ec:a5:4a:d1:3b:08:6c:70:81:ba:3e:c0:bd:95:63:
2d:50:ac:69:df:08:ae:c3:7d:00:dc:06:cd:2d:de:
33:77:e7:41:a1:a8:67:4e:e9:0b:21:8e:99:c5:29:
4f:26:3e:35:97:a1:51:a1:f6:eb:72:c1:2c:59:e7:
e5:6f:d9:f4:2f:a3:7d:06:34:7e:cf:43:22:21:61:
aa:b8:13:c3:fb:42:92:a6:72:e4:fc:11:c6:71:f5:
ea:4a:a4:44:e9:9d:b1:79:23:2d:3a:93:a9:aa:24:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:AA:8A:5F:9B:1C:25:33:D0:69:A8:CD:9A:2F:B6:77:50:56:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl
X509v3 Authority Key Identifier:
keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.203.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:54:9a:33:af:bd:91:26:41:78:94:da:f2:88:46:60:c8:7c:
c3:9c:46:db:01:67:af:ae:06:7a:ba:d0:01:92:a5:db:93:88:
fa:02:4f:75:af:1b:93:8f:e9:b0:9b:62:d9:82:a6:af:63:55:
f9:67:17:5b:75:f4:2f:1e:dd:57:22:d7:39:0d:4b:81:81:c9:
50:81:80:8b:19:00:b3:c4:2e:e6:e3:c7:e8:f9:78:17:09:64:
5b:24:8c:f0:50:f5:9b:07:97:a2:ed:6a:b7:06:38:47:ed:4e:
b3:2f:14:41:12:05:ee:42:62:16:5b:82:72:40:76:a4:0e:32:
cb:60:af:a4:97:82:a0:d0:1e:4c:2c:b0:22:ae:39:9f:d2:d4:
3b:0e:c7:0a:d8:ce:87:57:43:ba:14:e3:0a:fe:5a:ee:b0:fa:
89:54:ac:f4:39:3d:8d:8f:8b:88:78:5f:cb:63:cf:4e:bc:d9:
35:9e:19:3c:b2:c3:5b:1f:05:34:79:8f:7c:ee:4a:85:dd:3a:
d6:1a:f3:ed:8f:e0:a1:86:cd:07:bd:1a:c4:35:1e:9b:e1:a8:
3f:78:ad:f2:b2:a4:14:20:60:4b:36:70:02:3b:a8:74:ae:9b:
3f:97:d6:46:90:e5:77:90:9b:1a:88:b1:ea:75:de:98:55:0a:
14:7c:05:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:24 2025 by rpki-client on console.sobornost.net