Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa
File: f829599e-00f8-3c5a-95c8-1624e200ebd0.roa (raw, json)
Hash identifier: Zr5hvRHJvdghSPayCyOmcAmf5XmAJ6FCouh67cPqge8=
Subject key identifier: E9:64:1E:FA:CD:37:28:D1:E3:54:49:77:D1:70:09:28:28:95:FD:71
Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c
Certificate serial: 010D0C9F43285849244E7C9765B3E8968D3D7E80
Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 194
IP address blocks: 128.117.0.0/16 maxlen: 16
192.43.244.0/24 maxlen: 24
192.52.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7c:97:65:b3:e8:96:8d:3d:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=9f3307f1-3447-4261-a959-18a42924162f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:14:37:eb:24:9f:2b:9f:2f:cf:f6:c0:bf:
17:39:c8:dd:fa:86:29:8a:fc:77:20:ad:d3:a7:97:
44:61:51:cd:52:98:4a:aa:4c:c9:2c:a6:38:5a:d9:
e7:b1:65:c4:bc:16:08:50:45:33:b0:27:c4:a7:06:
9b:b5:dd:18:de:61:5b:f8:81:f2:9c:05:07:9d:9b:
dd:34:9a:fe:bf:a9:ac:c5:e0:52:60:86:80:ea:18:
14:13:55:49:e0:e3:0c:58:bb:18:72:af:87:97:84:
a0:6b:14:37:3f:cd:2f:00:ea:21:8e:a0:c0:10:03:
2d:c8:2b:4d:27:d8:d6:c5:37:7f:19:27:7b:d4:d5:
fe:70:e7:ad:e2:87:aa:42:ff:28:04:ad:fe:b9:dc:
f6:3e:31:c0:55:86:ed:95:9b:9e:f5:1a:00:a8:34:
48:d9:0b:cc:58:50:d4:72:fb:b3:ff:b5:e3:aa:a9:
44:c5:ea:c4:30:5d:e3:09:93:b2:0b:f6:ee:87:b2:
85:e2:6d:c4:a5:f4:c4:f2:0a:e5:49:4e:00:8b:8b:
b2:0e:c1:52:e5:47:1b:a4:35:15:1e:6a:a9:ea:ef:
fb:3a:30:02:54:36:22:f5:9d:d3:3e:9e:1d:4f:6b:
e9:69:6f:ff:6d:7e:3f:91:5c:a2:1b:b1:ae:a6:58:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:1E:FA:CD:37:28:D1:E3:54:49:77:D1:70:09:28:28:95:FD:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl
X509v3 Authority Key Identifier:
keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer
sbgp-ipAddrBlock: critical
IPv4:
128.117.0.0/16
192.43.244.0/24
192.52.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:be:c7:6b:75:95:e5:ea:73:00:ec:dd:84:97:11:91:42:c4:
29:37:f6:3e:61:4d:83:38:2a:46:a2:cb:1d:f8:85:f2:bd:eb:
68:6b:6a:92:8d:89:25:e8:06:1c:28:ec:17:27:52:dc:d4:cc:
62:2a:c1:ab:79:86:cf:36:35:aa:85:d6:fc:e2:92:2c:46:2b:
04:21:6c:99:84:ac:f3:46:d0:e3:9a:4e:04:0f:05:7b:5a:d1:
1e:3b:0e:e2:20:e0:f8:b8:d2:14:38:8e:31:73:fb:ef:58:e9:
15:21:f8:40:64:1f:92:03:ca:9e:1a:fb:d8:52:ea:f7:85:2c:
90:95:89:80:4a:a0:da:03:85:8d:a2:ec:7d:6f:44:10:9e:8a:
a3:bd:88:02:01:83:50:cb:c8:50:04:b5:8f:8c:df:04:42:fa:
71:68:e5:ef:bb:82:df:d2:d6:43:cd:5e:7b:a6:38:0f:0f:f3:
76:95:1b:0a:05:78:58:19:6e:e9:70:d9:f5:42:ff:b3:1a:35:
d5:2a:ea:1a:36:51:fc:fc:31:bf:f5:76:38:3c:5f:83:5f:90:
67:e6:9d:0c:ff:be:e9:8f:88:e9:1f:38:35:90:7c:56:f0:8c:
3b:5e:7c:34:69:d7:54:5d:36:0d:ce:ad:4f:3c:1d:c5:ff:5f:
f8:10:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:35 2025 by rpki-client on console.sobornost.net