Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa
File: 08b963ee-e094-3e46-84b1-392bbcac2a6b.roa (raw, json)
Hash identifier: w1NaTjlnDQANv+RFcEhzblP/hWg1lDh8zukxiEFtyOk=
Subject key identifier: 92:4F:5D:43:A8:73:3A:EC:50:15:08:C7:CE:98:11:E5:F1:2B:F8:70
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584957F40A22FCE5840A5124FB00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11290
IP address blocks: 24.122.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:0a:22:fc:e5:84:0a:51:24:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=3f161db9-d172-4b31-a702-07efe427c7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:c3:c7:44:15:37:b1:2f:34:a6:11:d8:90:
9b:9e:bd:b5:a7:fb:7f:d6:0b:ae:dc:c0:b1:16:d5:
72:42:e6:cb:5d:45:f3:7f:74:bd:08:b3:26:b7:48:
b3:eb:20:a4:e3:ed:12:f4:57:a3:92:81:b6:90:08:
fd:8d:13:24:34:4c:6d:60:08:18:fd:cb:77:ed:b7:
21:6c:44:69:7a:25:4b:83:03:4e:f6:5f:a9:06:03:
62:12:70:02:8a:ef:3a:6d:88:db:7c:7d:58:0e:b7:
59:8b:86:31:cb:6f:2c:93:35:1d:6e:c3:ce:b5:99:
27:2f:6c:3a:c4:25:44:ef:c8:7b:97:e1:b6:8f:3e:
62:33:b4:4b:94:32:95:c8:a3:15:62:a0:5e:ac:13:
2b:94:99:2b:f8:e9:ca:df:61:fe:56:12:db:61:c4:
69:2f:e0:55:26:6f:c0:68:29:51:42:85:e3:fa:8d:
c3:f4:ec:61:f6:67:76:90:8b:c0:fa:ca:f2:c5:7e:
cc:b9:cb:55:ff:e3:84:b5:9a:93:44:ec:7d:45:08:
0a:d1:ea:ca:fa:2d:9d:81:74:2a:ae:67:5e:7c:99:
27:a7:1f:1d:53:6d:38:69:3a:98:79:39:56:1e:c9:
6c:e0:87:fa:91:2a:13:15:83:a7:5c:a0:dc:ae:b2:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4F:5D:43:A8:73:3A:EC:50:15:08:C7:CE:98:11:E5:F1:2B:F8:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.122.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:9b:55:66:e6:9b:9f:2f:ec:98:74:63:f2:50:7c:76:d3:09:
de:48:d7:7a:3c:de:b2:cb:00:5b:ae:85:d0:d7:53:93:ee:15:
16:1d:0e:be:b7:aa:4b:b9:fd:4b:c5:bc:c9:6c:49:f7:5b:0f:
29:76:fa:e1:28:6b:98:10:c3:e5:51:77:c7:d2:2a:9a:dc:5e:
d7:27:53:d1:b1:6f:12:42:f9:cc:02:69:5c:9c:79:d9:e9:f3:
03:62:7c:94:68:71:67:4e:f9:27:93:f7:d7:8b:95:30:a2:bf:
c1:c7:37:d3:5a:40:93:2a:26:3e:61:05:fb:0f:cd:31:a9:6b:
4a:3f:79:5d:16:05:c2:da:85:bb:8b:3e:14:65:e7:60:b7:c9:
0a:cc:e8:15:03:fd:6b:54:d2:27:54:b4:56:f7:61:07:44:4d:
3b:15:2b:f4:5e:06:51:81:10:fe:ba:df:38:49:4e:fe:33:30:
d1:b6:57:9c:30:61:13:4c:dd:ba:33:26:7b:35:46:05:9f:5a:
d9:80:50:3f:66:31:1b:fb:76:16:f5:7f:cd:c2:ac:d9:0f:e9:
d7:b2:3b:02:f6:6a:3c:e2:1b:8f:8e:6b:bc:28:67:bb:52:6a:
c9:37:32:ba:3f:02:68:ca:18:b0:53:42:cd:6c:b1:81:5a:f1:
a8:64:60:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net