Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa
File: d2408c5f-d225-32f4-9f6c-82686c9fa438.roa (raw, json)
Hash identifier: trIhKRxry2rWH6DkeAyqzv0uMGAu1VMwRAa/mj/9lzk=
Subject key identifier: A0:61:E5:5B:D4:E9:C2:38:FE:A4:16:96:3A:68:D4:C8:7A:9E:C6:5E
Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial: 010D0C9F432858495D896B2E99CAAFC377E349A0
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa
Signing time: Mon 31 Mar 2025 01:00:47 +0000
ROA not before: Mon 31 Mar 2025 01:00:47 +0000
ROA not after: Sun 29 Jun 2025 01:00:47 +0000
asID: 32058
IP address blocks: 216.147.192.0/20 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5d:89:6b:2e:99:ca:af:c3:77:e3:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Validity
Not Before: Mar 31 01:00:47 2025 GMT
Not After : Jun 29 01:00:47 2025 GMT
Subject: CN=d4bd001d-8522-4534-8e4a-8913f888b149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:e4:74:8b:30:46:28:c8:a4:51:86:45:f9:
48:5f:a0:4a:2c:27:86:1c:51:d1:fc:6b:b1:40:ed:
0c:59:6b:86:70:19:45:50:8f:4e:54:b8:a6:6e:82:
5e:10:87:db:c8:0a:40:d7:c2:c8:e2:32:74:eb:aa:
aa:86:91:9a:b1:82:66:7e:84:81:b8:85:3b:54:ce:
75:85:78:68:64:72:b1:e5:17:3f:75:63:04:07:84:
d8:77:dc:0d:40:32:46:f9:6a:ca:b6:bb:1c:7e:05:
34:08:11:ea:16:87:0b:1e:0e:99:f0:75:a8:b0:d7:
44:8d:56:0f:b2:02:12:0f:72:c7:59:46:51:0a:b4:
ea:6d:c4:53:2c:69:3f:72:46:ab:f5:05:6f:da:fd:
8e:b1:d4:c4:7a:3a:2a:3b:d3:30:78:f3:13:63:49:
ad:71:13:be:f6:31:33:36:70:af:23:7e:f0:d4:2f:
93:90:f2:64:80:6c:61:66:c6:a8:b8:73:22:ce:3e:
f9:54:c0:61:7a:ae:a8:c8:bc:c4:6b:c8:f4:e8:03:
0f:02:54:fb:af:46:8f:2a:8f:63:fe:90:8a:ed:df:
4d:ad:d7:44:48:53:ad:21:83:30:7f:5e:bb:a5:64:
de:79:43:dc:13:5f:60:e2:c4:8f:fe:83:5e:0a:3f:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:E5:5B:D4:E9:C2:38:FE:A4:16:96:3A:68:D4:C8:7A:9E:C6:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
X509v3 Authority Key Identifier:
keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.147.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:61:62:59:41:3c:d6:4b:23:a8:f3:0b:f0:bc:9b:9c:5b:0e:
e4:ed:4e:61:95:d6:8f:e9:dc:4a:d2:c1:ec:90:00:00:1f:ad:
45:41:55:44:00:27:6b:53:80:08:11:85:9c:4b:f7:62:83:4d:
78:21:c3:c1:dc:ca:bf:bb:1f:d8:dd:2d:51:e1:cc:35:2b:96:
55:f6:3a:2d:ba:b1:24:48:34:c3:52:e3:02:51:fa:5a:24:74:
be:9c:85:13:72:85:a2:2c:36:c8:54:8b:1c:0f:b3:a3:7c:ea:
67:c9:de:07:77:d5:c6:14:a8:21:c3:c5:b8:a5:8e:d2:6d:c1:
9f:eb:9d:1c:93:d7:6e:b8:7c:30:a6:07:68:2d:93:60:5b:06:
11:31:7d:88:0e:9b:d1:e8:a5:a3:75:10:75:00:39:b9:ca:7d:
4e:4c:23:e2:b8:3f:09:43:1a:f6:02:25:01:f6:ed:fe:14:86:
53:a6:2b:d9:4e:3f:69:5e:f9:7d:ac:90:0e:16:a3:ab:f7:d2:
76:cc:a1:1f:b5:cd:f7:8b:c4:59:02:b3:11:3f:fc:a5:45:83:
44:06:57:11:b5:b2:f8:08:4f:13:f7:ce:71:ee:9c:39:c3:74:
c4:29:c4:f7:82:d3:d4:a7:a7:07:1e:46:4b:22:49:29:4a:f6:
50:a4:fd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:36 2025 by rpki-client on console.sobornost.net