Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c0b85428-36e7-3478-8d6a-b93d99ccda8d.roa
File: c0b85428-36e7-3478-8d6a-b93d99ccda8d.roa (raw, json)
Hash identifier: qWxrFx+pvrZLUjvTld/rMD6CLPbRI9wb/22dweDS/To=
Subject key identifier: 51:07:3C:D9:22:A5:47:8B:9A:5A:A7:FE:3B:20:66:E3:18:9A:49:E5
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584957F4094AB033D3D9BBC8EAA0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c0b85428-36e7-3478-8d6a-b93d99ccda8d.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11290
IP address blocks: 24.142.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:09:4a:b0:33:d3:d9:bb:c8:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=dd0945d5-5859-451b-ac0d-4d72ffb949e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:a4:c1:d2:d2:db:f3:55:13:3a:f2:ad:0a:
37:5c:d9:7a:c6:24:e2:05:52:b9:62:eb:71:27:fc:
ce:df:df:fa:90:da:e7:85:2a:d4:00:47:d5:c0:3c:
6b:8b:65:da:f4:1b:77:18:0f:a5:e5:bf:f0:0f:b3:
8a:cf:ed:09:a0:32:da:6a:3e:fc:d1:b2:73:2c:2d:
0f:a6:40:bf:e2:6e:97:f6:dc:f3:3c:ab:2e:12:4e:
46:31:fe:d7:ec:d0:b3:e9:7c:f9:bc:00:35:0f:78:
e3:05:51:32:79:fa:ca:67:1d:89:9c:31:3f:ec:7c:
ab:5d:8b:02:67:73:4d:93:3d:03:fb:2f:9e:65:6e:
a7:2e:3c:0f:c0:77:8f:dc:db:ed:b5:a3:de:80:ec:
27:f5:8f:73:71:d0:e3:f7:9f:3b:41:c7:90:0b:21:
35:39:00:d2:e0:f7:d3:56:83:0f:a1:4c:bd:64:80:
88:d4:5f:67:05:b2:a0:f3:6c:1a:75:9c:16:42:d1:
04:7a:9a:02:dd:16:cf:cd:26:78:47:d7:47:2e:8d:
62:5a:3a:09:fb:03:bf:fe:1d:7b:65:3f:03:3d:7e:
25:a5:88:e1:d0:44:d8:4a:b7:10:53:94:c5:02:0e:
93:8e:fc:16:ee:ec:14:e9:1b:de:a8:43:61:27:eb:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:07:3C:D9:22:A5:47:8B:9A:5A:A7:FE:3B:20:66:E3:18:9A:49:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c0b85428-36e7-3478-8d6a-b93d99ccda8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.142.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:af:4e:f5:53:7a:63:cf:54:10:b5:b0:22:e7:72:db:7d:1b:
b7:17:a8:da:7b:87:14:38:59:c7:e9:0d:ca:95:96:88:8a:85:
d4:54:7c:06:ed:21:db:b0:6d:06:72:15:7d:16:d7:8a:69:7a:
10:c5:a6:ff:93:09:2f:f1:48:08:86:0d:7c:67:17:18:b9:0a:
8f:43:dd:77:c9:f5:31:2e:4c:a2:15:b5:3b:26:ad:fe:4c:7a:
f6:c8:ce:f5:a8:ec:f8:3a:8a:12:0a:1b:5a:68:9e:4b:ae:f3:
e2:09:96:be:3d:46:32:03:ae:8f:3b:8d:1e:5f:1b:03:6a:be:
43:d4:b1:92:7d:96:28:03:6d:31:66:59:5c:77:4d:da:00:79:
ce:37:55:ea:52:84:a7:1a:11:9f:06:e6:84:0c:f8:51:da:d5:
54:f2:b9:5e:25:f7:5a:fb:43:6b:14:68:10:47:e0:eb:d0:f3:
56:3a:a8:66:6b:13:cd:e4:e8:e5:3b:7d:9d:a7:7e:7c:6e:77:
5a:25:f7:07:eb:db:f9:03:f9:fe:3a:1a:7f:91:fe:16:12:a9:
a0:3e:50:c5:a7:65:0d:ad:20:0f:f8:3f:97:58:f3:24:02:ee:
f7:98:60:e4:a1:ab:64:38:db:66:2e:5d:b2:75:d4:08:a7:68:
b2:af:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net