Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa
File: b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa (raw, json)
Hash identifier: SEAM7twVFet2Jt6PWmbNUAqj6bZ37E7/vSaTr166mXI=
Subject key identifier: 1E:2A:BF:6C:24:EF:63:D6:A6:CE:A5:27:46:B1:41:69:27:EF:71:2C
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584950F966D3D7BF7DEA31E67980
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 11290
IP address blocks: 216.228.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:66:d3:d7:bf:7d:ea:31:e6:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=9ea99dca-dc33-4079-a691-7a781b2e0f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:92:8a:bd:78:ef:a9:bf:6b:b5:d1:7a:84:
d0:d7:07:0a:4f:e7:c7:7a:f0:66:20:1d:23:c2:de:
4f:a8:e6:17:96:3f:ff:9c:4b:55:ec:b4:fe:cf:e6:
00:23:a8:8a:57:e7:e1:87:a6:f9:7b:68:b6:af:e4:
33:a5:f6:43:cc:28:95:0d:6e:62:17:40:37:fb:77:
69:7a:32:8c:8f:f4:f7:93:70:f7:47:2d:55:ff:db:
43:09:a2:4c:93:f9:64:22:15:af:82:73:47:96:8a:
5a:27:7f:d5:06:a8:f9:26:e2:c8:ab:3c:14:22:e2:
6e:99:c2:aa:4d:b8:a1:21:b2:ed:f0:ec:7c:58:f9:
a1:52:65:1a:d9:8a:9d:0e:77:e9:96:7a:c4:2f:b5:
d9:38:e6:f9:0e:e3:e4:be:61:77:e9:8f:25:04:7c:
63:4b:98:96:6d:9c:bc:50:e9:0f:18:9c:af:87:95:
38:ac:ef:44:94:12:84:de:2e:03:f1:9c:3b:27:41:
75:07:f8:a4:93:dc:bb:cb:a7:75:3a:64:cb:3b:f5:
ac:bf:4f:31:15:30:71:34:9b:d8:b4:a3:df:2d:14:
fb:82:9e:5f:fb:e1:6b:78:bb:65:fb:0c:c9:02:87:
d6:7f:3d:57:12:51:ca:3f:81:47:17:e1:44:4f:96:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2A:BF:6C:24:EF:63:D6:A6:CE:A5:27:46:B1:41:69:27:EF:71:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.228.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:a5:37:b3:ed:47:5e:76:05:cd:33:71:42:00:d5:99:1f:d9:
ad:8a:83:a1:32:b1:66:24:05:ce:b0:76:e4:e7:f3:88:6d:02:
36:17:8d:b9:26:0a:ab:24:a6:23:e0:d3:7e:06:9f:76:b7:83:
0f:52:28:47:88:09:f2:de:45:f8:5d:2b:6a:3e:ee:be:57:f9:
62:db:06:6b:8e:d3:aa:e8:76:6f:c5:b1:0d:fa:83:54:e7:c8:
fb:86:de:3d:dc:f5:d8:f0:be:86:92:4c:e8:58:2a:ad:31:b8:
cf:ce:c7:18:74:64:92:6a:85:28:16:a6:a6:fc:4f:18:d0:71:
bb:ed:e4:f1:6d:3e:af:b7:81:80:c2:e6:7f:11:20:b9:86:cd:
b2:6e:08:ef:b7:99:c4:b1:e1:b3:ef:40:cd:fc:d1:a2:35:29:
44:d0:5e:cd:97:cd:71:09:aa:42:8a:59:79:f2:40:04:3e:ad:
80:05:b4:fd:3d:c1:44:29:e0:90:e8:fc:c1:cb:35:33:2a:09:
2f:d2:e6:1d:e5:84:db:14:dc:ce:0c:85:ab:87:3b:65:64:4d:
ec:ce:2e:88:89:04:48:56:ed:6e:5b:2e:46:dc:ab:98:d9:74:
b0:32:36:82:ed:ed:3c:62:75:42:37:ff:6a:b5:66:b4:22:27:
a0:39:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net