Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa
File: 2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa (raw, json)
Hash identifier: /G3mm1aoowlT30R5VQlvXK7oAoqJZLsx2Aa2Kzru4X8=
Subject key identifier: 97:2E:EC:50:2F:40:36:65:FF:F2:0F:AC:99:AB:9C:60:16:CE:0F:EB
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F4328584961B98A18CFE6C347D914B8E0
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 29968
IP address blocks: 208.20.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:8a:18:cf:e6:c3:47:d9:14:b8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=187fcac3-aa97-4de8-a8f8-f2cffda281aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:92:b9:d3:04:91:4d:c0:a4:4f:03:dc:c2:
ba:78:d0:6b:9e:bf:68:07:33:6f:ce:66:7e:ba:b7:
89:a4:8d:b6:c5:3d:dc:e3:58:86:22:40:a4:d2:e8:
fb:78:6f:b7:27:59:4b:fb:9f:a0:47:4f:4c:12:86:
d3:5b:1b:d5:f3:8a:0f:84:a6:09:c6:e1:76:6d:d6:
a7:33:79:06:14:f4:01:97:bc:b3:a6:4d:d9:40:66:
28:74:f3:c5:bb:1e:8e:ae:9f:ee:99:e2:03:82:ac:
14:1d:cb:4b:c6:b9:ee:ee:02:86:fe:fc:b3:50:da:
1e:41:3e:c6:d4:09:7d:04:40:a2:c6:f2:b0:00:65:
47:74:39:3b:bf:4b:2c:5a:38:23:bd:31:c2:04:f2:
9f:dd:87:66:41:29:86:f7:13:e6:d0:1a:35:b8:20:
fd:80:63:69:3d:59:9a:de:a0:8a:eb:5c:f3:4d:a5:
6f:fe:ca:81:90:85:9d:0c:a6:7b:bb:d7:46:5f:30:
54:c7:3b:01:42:db:0f:68:09:56:70:41:eb:e0:9f:
08:d8:4a:94:a2:04:b0:65:de:97:af:51:42:6c:c7:
41:34:d4:b2:9c:ab:b1:07:7c:77:80:72:c0:90:30:
9e:31:01:e4:61:e3:df:5c:96:78:6c:fd:d9:44:ef:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:EC:50:2F:40:36:65:FF:F2:0F:AC:99:AB:9C:60:16:CE:0F:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.20.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:be:fc:80:ec:24:5a:85:d8:0c:03:b6:f9:d5:c6:cc:f4:29:
ef:ca:fc:01:e1:81:11:90:e6:e5:3d:ef:3a:f1:a0:dd:fe:48:
55:97:05:35:1d:fc:2b:aa:63:c9:90:09:5e:82:63:ad:ca:34:
5c:f8:0a:8b:4b:91:0f:df:74:81:20:71:bb:1f:32:4f:7d:2c:
b7:82:cb:8b:9f:bb:fb:1f:fe:87:87:aa:66:b2:06:a8:12:18:
e1:29:84:92:09:d8:73:a1:82:b3:ac:19:a9:0d:b4:19:e8:b8:
7d:72:88:c4:b2:00:ce:f8:7f:cf:d9:c2:f0:a7:23:2a:4c:5d:
8d:da:52:07:b9:24:61:ea:2f:30:7f:19:87:0c:3d:4a:98:eb:
9f:93:a8:1b:aa:ca:87:3f:52:64:ca:2e:17:69:31:12:03:f2:
50:ed:79:b3:7d:1a:40:7f:1e:20:cb:e1:80:7f:9f:a8:c0:c3:
9a:e1:c6:6e:bd:99:95:fd:11:a7:f1:42:28:61:dd:88:a5:43:
92:70:dd:e8:8e:ff:ad:44:45:0d:ae:a3:12:4e:4d:7f:cf:e1:
fc:8f:19:41:56:70:c6:0d:19:b2:66:80:38:04:18:ae:ef:13:
f9:d1:8a:0d:57:40:e8:48:4c:dd:df:34:0c:ae:ed:7d:1d:ff:
ca:84:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:36 2025 by rpki-client on console.sobornost.net