Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/a90debc4-5a03-3d04-b433-557eafb4685f.roa
File: a90debc4-5a03-3d04-b433-557eafb4685f.roa (raw, json)
Hash identifier: PMsuRwGTPUH+GYG//s7L7p9i32rRYMQFYqFonxtCBvA=
Subject key identifier: 8B:41:DF:37:F3:37:73:82:E3:C4:97:ED:0A:65:C7:8A:29:67:62:95
Certificate issuer: /CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11
Certificate serial: 010D0C9F4328584975445251917B02DA35E9A220
Authority key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/a90debc4-5a03-3d04-b433-557eafb4685f.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 6939
IP address blocks: 199.83.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:52:51:91:7b:02:da:35:e9:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=e52beda6-e23d-4b0d-8fe3-b4a83d414fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:71:dc:e2:98:d9:bb:9d:2a:2a:4b:c2:05:
78:01:02:45:a2:35:0c:b4:a8:e9:6a:a8:ea:0e:35:
a5:79:8f:d6:28:89:5d:cf:09:a0:70:59:64:8c:ab:
ea:43:f7:a9:7e:25:da:20:26:73:84:b7:a0:48:d3:
63:65:de:fb:1d:a6:93:09:67:32:a9:30:45:92:79:
34:ba:99:66:98:a1:3a:d5:c5:d4:c4:db:90:bf:46:
11:97:ec:97:85:50:0d:ad:dd:af:f5:6c:3a:50:5a:
45:64:cd:0b:08:02:77:7f:81:84:56:f7:b4:57:0d:
9f:55:8b:f4:a2:9d:8d:08:c9:56:a2:b4:00:07:4d:
2e:23:91:c2:47:11:19:15:df:7a:df:eb:a7:b8:22:
e8:51:5f:b3:a4:28:4e:1b:c0:2f:85:53:14:2a:51:
3d:91:f2:5f:29:c4:14:36:b6:57:8e:99:a4:f5:a1:
cf:8d:e8:d3:89:75:75:a8:f9:ca:f9:e5:02:f3:fd:
fd:3d:6d:41:6f:98:56:b9:a4:d2:e0:44:4a:e4:e4:
2e:83:9d:10:b3:e2:b6:0b:07:d5:ee:65:a2:6c:c2:
e8:2f:6c:fd:ca:ad:1f:d6:c4:b1:c9:56:91:d8:16:
29:97:1f:cf:dd:39:9b:4a:d5:10:74:53:eb:f9:cc:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:41:DF:37:F3:37:73:82:E3:C4:97:ED:0A:65:C7:8A:29:67:62:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/a90debc4-5a03-3d04-b433-557eafb4685f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl
X509v3 Authority Key Identifier:
keyid:55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer
sbgp-ipAddrBlock: critical
IPv4:
199.83.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:53:fe:6c:4c:cb:9c:73:7a:59:33:f6:37:de:29:fc:ef:2f:
52:67:af:1f:d2:f0:ba:25:03:95:c8:a8:c5:d9:2f:ac:ac:1a:
be:2e:a0:c4:aa:82:50:84:ec:e9:09:70:d0:f9:e8:37:2f:22:
1b:99:87:2b:ba:a3:1c:dc:32:f2:6f:cd:ff:32:0b:85:f2:01:
6b:df:c5:ec:cd:bc:07:ab:35:a7:3f:c0:1b:1a:25:85:6b:f6:
27:89:1c:9a:1a:80:d6:e0:0f:3a:17:5a:79:c2:2c:09:73:d6:
44:f4:88:db:9b:10:c4:8c:c1:cd:83:9f:5a:c2:f6:d6:56:70:
db:fb:ee:68:ae:eb:7b:6e:02:43:d2:51:d8:fe:97:24:82:b8:
ca:6e:69:aa:c9:af:4f:03:3c:bc:c1:52:26:7b:c3:5d:65:9f:
7e:91:7a:d9:d4:fa:5a:aa:6b:9e:79:4e:a9:31:89:14:45:fd:
ee:79:1b:11:df:01:1a:f5:e2:e5:fd:32:75:b2:b9:60:40:20:
e6:3d:53:f3:b0:0f:57:fd:d3:7f:53:09:dd:27:70:e6:86:b9:
25:20:db:2d:52:17:7f:5b:82:44:79:aa:f7:a9:86:f0:a1:6e:
70:69:58:a0:14:00:89:8c:35:81:db:87:cc:03:d8:f9:08:ca:
28:67:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:25 2025 by rpki-client on console.sobornost.net