Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa
File: da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa (raw, json)
Hash identifier: TrMig5g6cn2pVbUQeaEBH++19mmvdHlRd6dlUQhE5t8=
Subject key identifier: DE:40:32:C1:9D:E8:41:6F:37:79:A7:2E:4E:3F:DF:30:F1:BC:F0:C6
Certificate issuer: /CN=3b70bdb6-9776-4d39-8f28-b4a225eb2060
Certificate serial: 010D0C9F43285848BA56411014D1C755D1240EE0
Authority key identifier: E6:26:AE:76:3C:3B:91:4E:3E:1D:46:9D:BB:AD:32:FD:B3:08:3E:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 398406
IP address blocks: 216.250.226.0/23 maxlen: 23
216.250.226.0/24 maxlen: 24
216.250.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:41:10:14:d1:c7:55:d1:24:0e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b70bdb6-9776-4d39-8f28-b4a225eb2060
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=f6c582e9-59ac-4982-98f4-82ae0540213e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:a3:4e:c7:96:61:19:b2:6b:35:b3:30:32:
8b:27:a8:c9:c5:57:fd:eb:88:9d:1a:63:55:72:36:
ad:92:4c:f1:16:9e:8c:54:c3:c7:07:cd:16:98:c4:
62:d7:6a:07:83:1f:78:84:4f:57:f9:d3:aa:4f:7c:
26:45:83:f7:e2:26:3c:0c:01:08:d5:d6:c7:09:74:
41:90:21:0c:a3:0c:95:5f:69:fb:4f:97:34:0d:b3:
65:62:bb:42:a9:14:ed:1c:bb:71:fe:c7:79:ef:07:
7e:82:72:a6:23:44:ee:e5:ab:63:9c:5a:3e:c9:63:
6b:ed:17:8b:56:88:54:16:2c:5b:26:7b:d7:2e:68:
bc:d4:37:f9:88:2f:50:8d:d7:c3:f4:28:d1:4a:78:
d5:42:37:ce:13:93:e1:9f:1b:20:bd:7e:1a:54:65:
fa:6a:d1:54:0c:09:d0:65:72:b5:50:75:0b:29:d3:
16:96:62:46:ea:15:f0:6c:44:c5:c2:60:d8:63:79:
31:f9:0f:91:20:2e:65:6b:e7:45:a6:fa:72:1b:fc:
22:80:97:f1:9c:fd:a2:90:dc:a5:82:f7:75:86:f3:
32:e8:22:09:4c:9b:25:74:32:99:85:e2:3a:ae:81:
fc:b8:f8:93:5f:8c:96:5f:6c:01:82:03:72:77:2b:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:40:32:C1:9D:E8:41:6F:37:79:A7:2E:4E:3F:DF:30:F1:BC:F0:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.crl
X509v3 Authority Key Identifier:
keyid:E6:26:AE:76:3C:3B:91:4E:3E:1D:46:9D:BB:AD:32:FD:B3:08:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer
sbgp-ipAddrBlock: critical
IPv4:
216.250.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d7:ac:e3:77:83:7c:1b:71:b3:90:8c:9f:12:94:eb:eb:79:
d8:d2:bb:74:ad:ec:94:8d:d9:45:7c:51:f7:95:ff:39:41:5a:
fe:b3:84:91:5e:e1:4e:03:cc:12:5a:36:a4:72:5f:f2:46:32:
95:0f:60:32:2e:0a:38:eb:d3:67:23:f6:e1:28:66:93:59:b6:
c2:de:eb:1b:4a:cf:17:d0:84:19:58:92:75:3c:bd:f7:96:f9:
4e:a1:79:e5:6b:46:37:83:f9:95:0d:cd:c9:2f:07:94:90:09:
8e:48:c6:2c:0d:f9:e5:a4:fb:8b:ba:7b:25:04:69:0e:db:80:
83:53:17:bb:9f:92:54:16:85:cf:45:f2:16:34:e6:ab:f0:1e:
71:b7:17:74:18:87:9e:b7:f9:f2:ea:37:d1:5e:57:f7:ba:7c:
b4:26:c6:ca:88:61:20:ac:77:ae:25:13:58:72:8d:1d:76:25:
d1:18:3d:51:f5:10:a6:27:99:bb:ed:24:68:50:2d:d2:9d:bc:
44:af:13:90:d7:cd:7d:64:a0:5f:52:3f:d0:ec:79:f6:c7:fd:
26:05:00:83:8a:5a:e5:7d:eb:d3:3d:37:1f:c4:6e:11:cf:04:
53:a4:99:5c:64:cb:3e:5f:54:b0:5f:93:81:ac:8a:18:37:1e:
f8:07:ed:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net