Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa
File: 5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa (raw, json)
Hash identifier: E4qRQicuy2Zp8PFAl/lvOXKUjPrkadZpeShHuz4Dzg8=
Subject key identifier: 3A:06:A0:A9:C0:A7:41:3A:BB:0A:D7:A5:4B:49:78:DD:75:1E:AE:36
Certificate issuer: /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial: 010D0C9F432858496A19A9D1A398BA0550ABEE00
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 64227
IP address blocks: 50.20.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:a9:d1:a3:98:ba:05:50:ab:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=9d898bf6-b0ce-4daf-9e87-52c7b0fd5c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:59:fa:c4:b8:49:f8:32:33:73:d1:24:b5:
1b:16:bd:6f:13:ed:1b:5f:13:d2:77:bb:8f:99:56:
fb:a3:ed:1a:4b:91:b4:4d:98:d5:c9:72:40:83:cf:
92:31:01:db:9b:12:e3:53:f7:90:f0:53:ff:48:b0:
81:ab:97:12:02:44:99:61:99:13:4e:c1:fe:b9:63:
65:ff:36:db:0e:29:4e:8b:9e:e0:0f:6a:3b:63:c1:
c9:2c:00:9a:31:e1:a8:a1:68:25:a7:8a:f2:1c:d0:
b3:54:b1:92:1f:3d:18:dd:dc:25:af:d1:69:5f:74:
f8:0e:32:25:da:72:f2:e1:47:98:2b:e6:eb:67:da:
94:a2:66:a0:b9:33:d7:cd:15:cd:58:88:d7:9c:49:
e6:b2:c0:3a:d5:97:aa:3d:11:84:e5:23:50:0d:2a:
ce:35:9a:e3:33:25:89:e4:dd:b5:d2:75:96:64:07:
6b:16:b4:92:c9:1f:ba:7c:a9:a7:8f:c0:ee:d6:79:
af:70:31:21:2f:a8:08:69:39:af:e8:16:1f:23:6a:
bf:2c:c5:9c:c1:f2:74:39:c8:97:de:b4:33:f8:81:
c6:61:33:00:86:cf:3c:47:cc:75:43:4a:0d:78:63:
ed:94:32:49:29:4e:e8:a6:8f:39:e7:fe:b7:b8:e7:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:A0:A9:C0:A7:41:3A:BB:0A:D7:A5:4B:49:78:DD:75:1E:AE:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
X509v3 Authority Key Identifier:
keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
sbgp-ipAddrBlock: critical
IPv4:
50.20.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:da:ed:1a:f1:93:d7:cd:c1:2f:2f:12:3a:c4:ef:3f:43:d8:
c1:d5:e9:39:d5:86:ab:87:bb:41:4c:b3:61:13:97:c0:f1:70:
92:f9:78:e1:c4:05:38:0f:89:f1:5a:9a:60:e3:d7:b7:83:ab:
02:cb:33:b6:da:bb:94:20:97:ea:fd:89:57:bc:35:7c:e4:74:
dd:ae:75:63:62:8d:0d:28:e2:37:41:77:19:6f:f9:32:62:16:
89:cc:aa:92:07:fa:ac:77:b5:8f:d8:df:1f:5e:82:be:b0:41:
4e:7d:f3:94:b0:5c:0f:2c:35:07:aa:8e:b5:47:18:d3:73:df:
86:ee:5c:24:1e:e2:8f:f2:2e:cc:e4:e2:49:b3:d7:12:a4:a3:
a2:a5:9a:06:73:36:cc:f7:19:15:04:53:3e:54:d8:ee:a4:6c:
5e:27:6d:00:f9:f2:1e:e0:81:80:b3:16:dd:2e:74:2e:f7:ab:
30:31:7b:88:71:d4:e2:54:4b:37:eb:dc:ce:49:ea:92:48:53:
8a:45:67:71:7b:b0:e9:a0:af:2f:1c:82:47:02:91:53:42:1a:
bc:c7:03:d9:be:a5:d7:0a:cd:91:f1:01:7f:0b:a3:4e:2d:c2:
69:0f:43:ee:a8:a0:a1:f4:a9:52:fb:ef:e4:f3:df:4a:78:ea:
34:a4:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:48 2025 by rpki-client on console.sobornost.net