Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
File: 0e86ddca-e803-349f-9e1e-d5560596f44d.roa (raw, json)
Hash identifier: WKtFLRAZrbtOWdYbILYkMKMsA7z0wOOANH2+j5LaOlg=
Subject key identifier: 3E:F9:29:09:43:F7:63:86:A6:46:82:AB:81:D0:0A:B5:3D:AB:0E:39
Certificate issuer: /CN=2b666ba7-a215-4f08-8204-c5b168b3360c
Certificate serial: 010D0C9F432858496FAF14B3D8F2A66380913060
Authority key identifier: AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 25661
IP address blocks: 199.119.140.0/22 maxlen: 24
207.167.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:14:b3:d8:f2:a6:63:80:91:30:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b666ba7-a215-4f08-8204-c5b168b3360c
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=49a741d5-f7bf-4918-b79b-2f1b089dc6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:68:f6:8d:b6:cf:2e:2a:7e:47:70:47:32:
47:6b:fb:b5:57:98:e5:14:b9:96:64:84:45:1f:e6:
df:81:54:66:8e:3c:7c:99:e1:b1:2e:03:79:9e:37:
b9:fc:1c:fe:f8:46:b5:35:e8:0c:b3:a4:96:a8:8d:
d2:be:6a:20:ca:4d:8f:53:92:0f:ab:d6:f8:fb:17:
55:a8:e9:0f:fb:52:ac:9c:d4:7d:b1:97:b8:57:a5:
7b:1f:26:7e:da:0a:9f:9e:89:18:88:05:76:ab:fb:
4f:c5:20:59:4a:c8:8c:5c:f1:af:cf:16:bf:38:c7:
5a:f7:16:b9:25:3a:00:79:0c:21:74:b5:a2:ac:a0:
97:78:85:11:2d:53:52:76:8a:fd:c3:eb:9a:19:db:
ec:14:3e:a5:c4:3a:7c:2e:97:1c:34:5c:2b:89:48:
38:40:10:bc:a4:4c:32:90:1a:c5:17:49:56:3b:f5:
fd:6d:a3:d1:46:2c:ec:ad:8e:ef:5b:38:bc:ea:7a:
ce:f0:40:3d:fe:21:e0:66:14:52:7b:6a:d1:f4:c9:
00:f5:ec:26:ed:8e:89:c8:a9:c0:98:2c:f3:19:b5:
d0:ad:03:50:97:ea:ed:72:da:95:f3:e6:70:72:8a:
e0:cf:65:89:66:6f:ba:f8:90:ba:2d:b3:7c:32:1d:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F9:29:09:43:F7:63:86:A6:46:82:AB:81:D0:0A:B5:3D:AB:0E:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/0e86ddca-e803-349f-9e1e-d5560596f44d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl
X509v3 Authority Key Identifier:
keyid:AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.140.0/22
207.167.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:84:9f:da:cb:45:7f:cc:69:f3:c0:3f:7f:f5:36:91:32:00:
50:bc:ee:4f:a7:6f:94:05:de:92:46:14:68:a4:b8:1f:e5:10:
1e:ab:d0:b2:73:97:9d:40:56:9c:37:69:be:10:d4:78:a5:0a:
f2:46:35:aa:c2:5d:28:4f:05:86:ab:82:fb:3c:0a:89:bf:91:
23:76:de:f3:89:a5:3a:ca:a1:41:76:d4:04:ab:60:99:6d:b6:
f0:14:71:95:56:85:c3:12:51:b1:ff:97:89:ae:81:4b:61:f1:
eb:10:61:99:c8:f1:51:6d:ba:d5:39:e4:1c:1d:c7:af:40:d3:
08:44:41:05:91:14:ab:ea:07:3c:92:ce:b8:f1:8a:2e:25:97:
00:db:1f:3a:38:5b:95:e2:d0:a1:98:51:e6:77:df:82:19:b7:
8b:10:e7:e5:85:b0:20:bf:3b:2e:5d:3a:96:6c:64:c0:08:cd:
2e:70:23:4b:34:f6:7b:db:c7:6d:d6:71:5d:87:47:9d:14:af:
c8:a6:53:ad:5f:dd:05:53:88:29:3a:50:02:35:2b:47:2b:18:
fd:61:bd:df:79:dc:bc:c6:16:c9:d2:f3:ea:c9:ea:0d:42:cc:
59:c9:41:c3:88:32:ae:0e:8c:a1:53:da:03:d4:90:1f:29:f4:
71:0e:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:48 2025 by rpki-client on console.sobornost.net