Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4fb98992-a216-3f6d-9adf-e8be7318839a.roa
File: 4fb98992-a216-3f6d-9adf-e8be7318839a.roa (raw, json)
Hash identifier: gfkGk7qIAVpyOXmAuG+vsgXaFG2A++doEKxKAER5v5A=
Subject key identifier: 73:3F:1C:99:5F:8C:56:EA:F5:1F:01:8D:CB:08:D1:85:63:9C:AC:6D
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584953C44D379D7DEED35E62C000
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4fb98992-a216-3f6d-9adf-e8be7318839a.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11290
IP address blocks: 158.222.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4d:37:9d:7d:ee:d3:5e:62:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=deb15be2-6743-4d68-95f2-42719c376012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:d7:e8:0b:78:04:0b:28:d1:64:04:17:af:
4b:8e:dd:f9:65:99:eb:ab:de:9d:15:31:37:92:6d:
a1:97:fd:3f:bd:39:54:2b:71:7d:4c:40:f6:e6:67:
85:b9:36:4f:ff:27:7c:3c:6c:63:0a:4b:30:94:ed:
e2:37:e3:76:85:6d:d7:23:37:c9:71:31:70:e8:f8:
1b:3e:bb:2a:33:33:a7:af:e5:bd:ec:08:2d:49:86:
e4:64:37:3e:e2:00:01:73:36:ef:d7:d2:6a:e3:8d:
9f:26:03:8c:44:68:de:25:e0:5b:5a:43:c0:89:3f:
63:ce:e3:55:90:1b:b8:bd:d2:21:04:4b:5f:d3:67:
8f:9a:05:74:3e:d8:f5:1d:8f:ab:ca:0c:c8:df:3d:
b4:7d:c7:0f:02:0b:99:23:60:7a:1d:6b:0e:b6:21:
54:d4:4e:82:66:c3:ec:5e:71:29:d9:b6:44:dd:6e:
96:c0:f8:95:0b:7a:bd:71:e1:47:19:8a:fc:3f:a8:
00:9e:4d:05:02:dc:01:68:6e:15:ff:af:7b:1f:47:
2f:97:27:13:96:3b:9b:68:18:20:eb:3d:0b:ea:3c:
15:93:a8:1d:d0:53:81:7a:d2:b3:7d:26:2b:3e:7c:
c4:56:cd:05:82:08:8c:7d:fa:56:7a:90:05:6c:dc:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:1C:99:5F:8C:56:EA:F5:1F:01:8D:CB:08:D1:85:63:9C:AC:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4fb98992-a216-3f6d-9adf-e8be7318839a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
158.222.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:db:30:63:de:61:b4:d4:65:ed:58:8a:36:16:26:44:ed:e7:
d1:c7:82:08:40:33:a8:f1:3b:fd:11:f7:0c:30:11:e7:43:48:
c9:17:06:8b:81:2d:66:17:02:ab:ba:86:83:0c:c4:ca:1a:88:
1f:38:cf:aa:1f:ab:b0:49:04:ba:dc:bf:de:f6:5b:3a:25:34:
05:2a:fb:04:c9:ed:48:82:c6:59:9b:e0:b0:70:c0:79:dc:8f:
4d:f3:cc:bf:b8:bf:38:2c:a4:45:d9:57:3c:fa:25:a3:39:24:
65:9a:5d:68:6e:67:17:7a:7e:e1:b6:63:a8:2f:a7:10:95:d5:
9f:e6:92:a8:b4:ea:3b:7a:cc:d9:e6:13:43:12:ec:18:a6:aa:
e0:a2:6f:ef:22:d3:fa:b7:81:15:17:cc:bc:d8:19:0e:ff:33:
b1:04:c5:36:a1:e9:69:2d:0a:c4:4e:00:7b:ee:c8:fe:6b:97:
27:3c:4e:45:71:90:27:44:58:88:40:e1:43:be:a1:06:2e:33:
65:24:1d:5c:b3:11:ec:6b:33:60:41:8b:ae:91:1e:c7:a8:d0:
a5:f9:04:28:66:81:83:13:02:eb:f6:13:53:f9:54:9d:b7:3d:
d1:e2:c5:75:fe:3e:a8:33:34:aa:6a:ad:8e:57:22:9e:85:50:
37:27:82:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net