Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa
File: 18e83aa2-2384-3c89-b95f-7230e577205d.roa (raw, json)
Hash identifier: n6iscVQkjGaqOULK5nxLYFDA5VePrtYLnJS8lRETNBc=
Subject key identifier: C2:83:8B:4C:C8:29:97:9E:5E:4E:83:30:C5:EE:FF:1E:C5:A0:98:8C
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584953C44CC9962B5ED61F1BCE80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11290
IP address blocks: 170.249.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4c:c9:96:2b:5e:d6:1f:1b:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=1c17e683-e021-4322-a27d-abcccae286d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:ed:e2:69:c9:15:3a:8e:cd:90:2c:72:a4:
74:c6:74:55:0c:0e:99:6b:7c:d2:75:02:a3:2d:80:
76:70:74:42:78:cb:c6:c6:3e:4e:59:0a:2a:8f:75:
e7:6f:83:4b:5b:17:82:39:6f:dc:0b:b7:99:f4:2c:
ce:a9:f2:39:b7:d8:2d:c8:6a:a3:e1:d0:1e:74:1c:
3f:27:65:5c:d3:7a:fa:75:00:a1:cf:96:f5:23:dd:
78:db:f6:76:f6:a9:6f:b2:87:01:06:04:18:6f:18:
02:3b:eb:e5:2f:8d:d7:d6:a6:4d:d0:63:b3:b5:02:
94:cd:03:13:1c:99:20:c2:bc:08:57:82:87:8c:f4:
b1:f8:3e:d9:fd:b7:16:df:79:e8:06:48:9e:62:98:
9d:a1:21:80:09:ca:0e:0c:dd:eb:47:b4:5c:5f:a3:
bc:f2:c5:11:9b:46:75:42:7d:02:cf:7f:45:4d:ab:
ff:61:a3:a2:da:ea:55:e3:03:1b:0f:54:c8:a9:a5:
44:fe:a6:07:58:de:4c:f7:a5:52:20:7a:9d:16:7d:
8a:06:1b:3a:50:2f:f1:46:7c:ba:a3:f4:35:ac:e5:
51:5e:cd:2d:f5:05:eb:8f:9c:ab:d7:de:41:0e:93:
eb:7c:8a:df:5d:25:bf:19:2b:c3:1f:d8:35:cf:1b:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:83:8B:4C:C8:29:97:9E:5E:4E:83:30:C5:EE:FF:1E:C5:A0:98:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
170.249.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:65:c1:2c:4e:ea:17:f6:f1:3e:83:55:01:aa:0f:c2:f9:05:
b0:f0:42:78:aa:5c:be:85:ba:b5:7e:bc:87:d6:f1:8b:e9:a2:
f3:bb:d9:a4:f4:fe:2b:f1:9a:8b:0b:9d:15:a5:1c:a4:f2:70:
e1:de:fe:24:51:65:e9:fc:7c:05:0f:98:2a:05:90:98:5b:23:
8d:17:9d:73:30:61:21:40:e9:5c:cb:94:fa:10:96:5b:d2:ab:
9f:85:ac:25:72:b9:ef:ff:ff:4d:1b:4f:37:ba:a6:af:d8:21:
4e:f6:45:bc:06:a8:4c:59:5d:60:ae:e5:97:5b:d0:f9:6e:e9:
05:70:84:80:7f:20:48:20:14:c7:30:77:f9:58:03:fd:24:73:
c6:a9:9a:de:9b:af:e4:16:0c:fe:55:6c:95:19:46:6e:0d:e4:
e8:fd:36:13:2f:4e:ac:8c:78:bb:ba:92:65:2e:80:76:b8:ef:
f9:8d:7a:00:c9:b6:64:80:23:1f:d5:7f:ff:b7:4c:d1:82:5f:
b5:c9:8c:26:66:10:bb:a9:b3:40:87:6f:7f:91:cd:42:a4:ef:
47:2a:57:6f:01:cf:a6:3f:b5:53:1e:93:00:66:92:2a:6a:00:
6f:e8:92:22:8c:fd:9c:da:c2:71:2b:60:2f:4a:d2:62:63:27:
15:c3:99:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net