Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa
File: 2e52f444-65b3-3cf6-883a-6e7fadd14311.roa (raw, json)
Hash identifier: 3bbjg0F7PlXJD/MrxijaLiUbNG6BaYkRPtA3JTuF2O0=
Subject key identifier: 75:7E:D8:41:66:E9:9F:14:A9:48:BD:E8:F0:A5:08:D7:86:E4:6A:70
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584957F4089E4ED523F7E444E700
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11290
IP address blocks: 57.134.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:08:9e:4e:d5:23:f7:e4:44:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=9fc6d861-e5d0-4df3-9c40-c1773a0b65d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:79:c1:dc:98:77:9f:95:a5:64:eb:b3:72:
69:9d:84:7a:17:31:73:8a:94:2f:7d:16:1d:f0:2f:
68:61:85:6e:0c:b7:53:7a:6f:99:74:01:97:4b:86:
97:85:39:69:63:6d:d4:bf:a5:a7:53:7d:b3:06:9f:
d0:67:74:ad:ff:01:1e:e8:93:b2:f8:79:6a:db:f9:
e5:ff:50:af:ba:9f:c1:81:52:2f:c7:7c:2d:b4:ec:
71:ea:06:b8:63:29:5e:9c:31:77:06:01:c7:2c:5a:
6d:1b:09:84:ba:a0:20:dd:6c:6b:ef:ab:8b:14:23:
36:78:59:72:80:b0:5e:e7:e0:af:14:29:9d:41:c9:
77:2f:3a:b0:64:4c:40:7e:20:e1:bb:00:53:0c:61:
78:af:b1:40:6d:88:7e:ff:f2:5d:ae:0c:bd:9b:eb:
00:53:30:1d:3c:30:b7:3f:8c:41:35:0e:d8:78:35:
d2:3c:ca:f9:25:35:48:30:ca:81:13:a1:2b:32:f4:
ce:5f:2e:83:c0:2a:d5:49:25:5a:72:55:9b:15:b5:
a0:cb:fd:cd:60:69:e8:e9:e1:4d:14:e5:9a:36:6b:
90:f8:aa:c5:77:d3:48:5b:0c:81:69:90:79:6c:48:
b7:6e:10:95:5e:57:28:1b:1f:b6:3c:49:3e:cf:46:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7E:D8:41:66:E9:9F:14:A9:48:BD:E8:F0:A5:08:D7:86:E4:6A:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
57.134.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:0e:af:9a:f9:e4:fe:f4:f4:e5:75:6f:fd:dc:6d:51:b1:92:
62:53:4e:7e:e7:e6:85:f7:22:55:f7:79:e2:b2:6f:7a:4f:05:
a6:9a:5f:db:06:a6:09:13:4c:04:dc:73:e1:06:3b:6e:72:5e:
db:b9:45:a8:54:ba:f8:d7:21:cb:d1:3b:64:95:4c:7e:2e:25:
d5:fd:25:ef:1e:73:6f:6c:b7:58:57:6d:68:45:47:b4:73:c9:
5d:9b:a9:41:27:cf:6b:47:ab:ee:f7:2b:9e:e6:5a:0b:fe:61:
cb:3b:ca:2f:f1:aa:f5:48:24:9b:e0:8b:c7:a1:c3:08:cc:1e:
dc:72:3a:fd:e9:f7:a3:80:50:53:a2:a3:cd:bc:b0:e6:e5:6c:
ab:06:19:7c:ae:39:8a:32:c5:de:62:62:37:b5:af:55:19:fa:
3d:59:16:2b:18:b9:a4:4d:a5:41:f5:fa:93:dc:77:91:71:df:
4f:6a:94:bb:66:29:5f:98:7c:ae:35:a8:64:9f:3e:6a:e4:15:
a9:72:25:b4:9e:dd:ef:5e:4c:9f:2a:3c:a0:e1:f0:80:76:1b:
14:ab:5a:04:32:16:e4:21:f3:b6:47:7d:7c:29:e9:75:4b:49:
f6:73:22:ee:fb:4b:7e:77:07:a6:ce:12:2d:5f:d5:76:e9:cd:
0c:8c:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net