Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa
File: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (raw, json)
Hash identifier: lwyZ0OHu4vqCa33sFakIZxkgcLvjWu5gYqEtdHpPS7A=
Subject key identifier: 55:B8:63:F6:48:EF:E9:FA:FC:50:29:F2:DA:13:50:12:98:72:5D:D6
Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial: 010D0C9F432858494E2EB1FE54CF4ACBACE55080
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 13849
IP address blocks: 173.243.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b1:fe:54:cf:4a:cb:ac:e5:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=428d05e3-58f6-4b5a-a07c-75f64e411769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:d5:34:ac:47:ef:3f:18:5b:dc:42:82:b1:
82:b4:4a:46:b6:28:0f:31:2d:c8:56:3a:5e:96:ff:
ce:f8:23:53:0b:2c:ac:df:3e:60:49:31:7d:ec:a1:
c5:26:b6:60:fa:cd:7f:6a:01:c3:3a:a7:26:5a:71:
9e:27:f5:8d:ef:fd:bf:bd:b0:ee:16:7b:73:f7:31:
d4:4c:18:ba:31:cf:67:97:41:c0:8c:4a:fd:c4:97:
5d:6a:88:85:70:62:71:94:35:4c:c2:4f:b7:df:5c:
db:1c:24:e8:88:9e:db:29:c3:6d:19:46:78:ec:9c:
eb:48:59:e3:04:23:1c:18:8a:e7:44:35:b6:02:c3:
4e:ce:bd:d7:f2:8f:07:03:b1:56:a5:ad:d1:77:56:
12:96:5b:a3:ad:17:24:fb:cd:3d:d2:d4:b6:ef:bf:
82:47:08:14:12:3c:1e:29:d1:18:fd:e1:3a:c2:52:
ba:41:52:a6:b9:58:b4:9c:d7:f3:9b:56:28:38:c2:
bb:97:53:c5:36:0c:3d:c1:4b:bf:86:48:e9:2b:db:
d3:89:05:4f:da:1d:91:56:51:48:36:d4:75:06:9a:
a0:72:dc:a2:cb:13:c8:e8:9e:8d:ea:95:fd:d3:fb:
9b:a8:ca:21:0e:0c:54:a5:da:9b:0d:9c:36:73:21:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B8:63:F6:48:EF:E9:FA:FC:50:29:F2:DA:13:50:12:98:72:5D:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
X509v3 Authority Key Identifier:
keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
sbgp-ipAddrBlock: critical
IPv4:
173.243.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:30:9d:54:9f:95:02:2b:70:49:a8:67:d9:73:82:24:f8:ab:
bb:0b:b3:8b:25:2e:12:4b:bd:30:9c:34:f8:63:1f:45:1b:a4:
ea:fc:19:77:49:4e:38:27:67:d3:e2:10:58:51:ed:d0:30:fc:
bd:a5:49:11:b4:07:13:1a:5b:9b:5b:a0:47:e2:39:1b:37:01:
8b:01:85:b8:9c:dc:fc:de:a5:7a:f0:6c:07:55:7f:8d:66:28:
3e:9e:ba:91:d2:6d:8c:88:aa:23:17:ca:a0:cf:5d:01:f7:39:
15:24:54:7b:f8:eb:6e:46:e6:8c:b4:f5:fa:85:51:80:bb:d9:
46:fe:86:b9:e7:2c:c7:d6:09:85:e0:63:c5:bc:aa:d9:53:75:
65:b3:7b:ec:87:69:99:52:e6:40:48:af:d7:e2:31:f2:c7:7f:
02:50:61:ea:89:af:46:aa:ec:4a:3b:a2:bf:c9:ba:eb:85:76:
3f:9b:ef:f8:5d:d4:14:02:e6:6c:37:d0:d5:36:1b:c9:86:20:
4b:09:c2:e2:9e:c8:c3:66:6c:3f:41:80:bb:34:47:a6:b8:b0:
a2:64:15:ce:05:88:b1:6b:76:2e:16:15:02:90:50:9c:04:f1:
ec:e4:f8:e2:4a:b3:1d:63:e0:22:09:ee:8c:39:60:49:82:57:
a8:35:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:36 2025 by rpki-client on console.sobornost.net