Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa
File: 8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa (raw, json)
Hash identifier: peLkHC7wb0FavzAjdzl/MjB93J8mtqO6sJq+DqHrFtU=
Subject key identifier: CE:59:DD:7E:67:D7:64:AC:6C:D7:C3:00:EE:24:3F:3E:7B:C7:3B:59
Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
Certificate serial: 010D0C9F432858495ABEBEFF0C48DA8F42651B80
Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 32098
IP address blocks: 204.199.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:be:ff:0c:48:da:8f:42:65:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=5d855afe-1409-4676-9a9d-e6afd24a5d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:66:25:5d:0a:a5:9e:38:f2:7b:d3:7c:a0:
0b:be:ce:19:db:95:06:fc:c6:df:d5:30:1e:9b:37:
86:d7:2f:5d:f6:16:e8:1c:31:34:67:20:86:45:07:
a9:9c:32:48:89:46:f6:25:7b:e2:60:8b:cc:91:de:
26:e9:32:f8:6b:0f:e3:7d:f6:d4:1c:fa:76:09:fb:
0f:f3:7f:ff:68:25:76:58:68:c6:f9:24:ae:1b:59:
cd:fc:60:60:30:72:81:4d:10:d9:ed:33:13:5f:69:
d2:02:81:7f:6c:85:2f:33:62:4b:78:85:69:69:52:
e1:a2:c1:1d:11:e4:19:b7:a6:6b:5f:fb:0f:c5:b7:
c7:7e:10:32:93:79:32:54:7a:90:84:02:4d:8f:8b:
4c:87:68:a2:12:67:12:03:8d:fc:65:04:13:c1:92:
07:3b:cb:f7:e7:82:2a:61:4e:b7:0e:9a:0d:3b:20:
a3:fa:e9:da:4c:9a:53:01:eb:0c:eb:f7:38:be:95:
93:27:87:4e:4a:e3:00:77:27:76:a7:e4:06:44:47:
5d:ba:60:03:8a:3b:29:d0:95:b2:52:65:c5:70:ca:
a2:e2:ad:2c:08:30:4a:97:da:94:59:51:3d:56:01:
f7:e4:85:c1:fd:63:75:f8:29:c1:cb:8e:fe:47:f3:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:DD:7E:67:D7:64:AC:6C:D7:C3:00:EE:24:3F:3E:7B:C7:3B:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl
X509v3 Authority Key Identifier:
keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.199.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:7b:5a:48:97:23:23:af:75:49:a5:28:0a:8e:82:62:5e:74:
3a:cf:eb:21:0b:98:07:20:13:53:91:6f:4f:65:13:7a:bf:d7:
82:55:de:64:18:22:f4:df:82:71:35:af:5d:3f:b8:3e:ed:b6:
82:81:a3:8d:08:96:a5:07:93:e8:04:1e:12:54:e0:f0:1b:18:
1c:08:4f:e5:c9:62:04:8e:f6:cf:5d:e2:24:46:74:38:c6:0e:
46:18:b5:f3:10:4a:3f:9a:da:4f:4d:64:b4:ee:f3:f9:10:7b:
3c:a4:5b:d7:a7:7f:02:3f:6a:d7:d8:67:b9:67:7a:77:7e:d0:
89:ed:18:a9:f4:a0:7d:ee:91:7b:e9:c2:0e:ff:18:c3:8d:4a:
5f:48:eb:35:3a:f8:6d:c3:29:85:12:68:18:28:19:2e:02:27:
89:a3:fe:f2:94:08:79:7e:f1:2e:01:e7:a6:31:9d:a6:a3:ae:
b7:52:f3:bc:4a:ab:b6:bd:39:23:6d:02:9b:1a:6b:d0:a6:59:
04:0a:d1:91:b3:bd:19:54:66:e5:23:02:52:90:4c:10:68:4d:
37:61:63:5f:da:2d:4e:29:c3:15:b1:e8:86:be:d8:e9:54:bc:
c4:b8:3d:95:27:9e:56:a8:75:e1:25:6b:8b:30:2b:b9:7c:f5:
c2:77:2e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:35 2025 by rpki-client on console.sobornost.net