Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa
File: 720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa (raw, json)
Hash identifier: 8YYNOOFoo1vv9aK4TwD9Ocahagn3d28o4vbPfGscYb8=
Subject key identifier: 30:28:8D:95:41:E6:0B:30:8C:0E:CA:61:2E:3E:CF:9D:2F:00:29:8D
Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
Certificate serial: 010D0C9F43285849446938ED937844AD842C9180
Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 833
IP address blocks: 165.140.200.0/24 maxlen: 24
165.140.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:38:ed:93:78:44:ad:84:2c:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=0e3e0195-737e-4ea0-881d-89b23d716b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:04:be:38:38:5c:5b:4a:d3:4e:18:4b:60:09:
00:4e:e1:d7:a8:24:c2:c7:05:34:76:84:c4:a1:ac:
5d:48:5f:2c:fe:15:8b:37:6d:d7:bc:b2:3c:65:58:
39:52:90:01:a6:58:0e:32:d1:fb:19:a4:ef:9c:24:
3b:39:f1:2f:6b:67:8d:39:55:65:54:cc:70:6e:ba:
55:b9:f3:52:d5:37:da:74:04:0d:86:49:88:b6:49:
bb:a2:f4:a8:4a:82:01:78:1e:67:cf:bd:cf:8d:91:
02:d4:d7:27:e3:88:e9:cb:44:56:21:7b:1a:fc:dd:
61:54:73:23:77:e2:18:d9:0a:6f:ad:a3:fb:c5:10:
e6:7a:ab:e2:ba:16:27:b4:2c:16:31:5d:0c:4a:fd:
e8:a6:d9:ae:4b:ff:97:91:92:c0:99:c1:67:24:f1:
7b:f9:a1:63:24:18:e9:80:e1:e1:17:02:80:9b:b2:
5f:b8:8a:c4:2c:73:fc:f5:60:e5:ac:bf:e3:9b:f4:
32:45:22:d7:17:be:c9:82:8f:ef:ab:b7:64:29:b3:
73:16:83:45:3b:ba:c5:98:9a:07:65:bc:f4:22:f7:
b7:87:28:e1:74:92:27:ed:52:81:96:1f:2b:bf:e7:
65:b0:65:ef:64:8c:67:ee:52:d5:3b:2e:41:a3:67:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:28:8D:95:41:E6:0B:30:8C:0E:CA:61:2E:3E:CF:9D:2F:00:29:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl
X509v3 Authority Key Identifier:
keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:0d:48:5f:b6:db:3f:01:0a:88:9e:a4:84:b0:31:19:aa:e6:
4a:8d:04:45:a9:a1:da:07:2f:5e:23:e6:7c:22:36:51:ef:d1:
92:6d:ba:c8:9e:5c:f9:d2:7f:28:1a:63:34:39:e0:7b:be:95:
ec:81:03:02:c0:b2:4a:23:e8:ff:8d:b4:79:89:e8:fe:72:99:
6e:37:68:8c:01:2f:5c:9b:5b:4c:13:23:9d:77:67:23:b7:77:
4e:c5:d1:d2:7e:c6:9e:7b:34:38:04:96:da:80:e0:fa:eb:fd:
2d:74:e8:dc:a2:8c:b9:e9:17:4e:14:b5:36:a1:b3:73:78:30:
c6:51:0b:ae:b1:7d:4b:d5:ae:d0:2b:cd:6f:2e:ab:c2:d2:67:
41:6a:e1:f9:ad:56:08:77:51:cb:4a:18:be:b8:72:e7:10:f6:
9b:b4:b9:3d:6c:3c:91:d7:94:c9:d6:e0:b3:3c:7d:67:4e:e8:
26:54:65:60:3f:f3:22:7b:67:69:6b:b2:a1:e5:38:e3:ed:c3:
4d:f2:40:94:9b:94:31:3e:c0:f3:6c:30:8b:43:51:4a:88:f3:
fc:3e:fc:df:a0:47:45:16:90:29:e0:02:e6:23:8f:b8:f6:b7:
5c:ab:aa:a3:b2:32:77:3b:2f:64:52:f5:4f:46:96:38:94:1c:
9c:d3:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:35 2025 by rpki-client on console.sobornost.net