Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa
File: dff15429-e42a-3405-bd1a-050a2f301bd0.roa (raw, json)
Hash identifier: uT7Yfi3g1Ch9f5Qfu9ux8TW2DY7WoqAdCCqcOEP+HVw=
Subject key identifier: A8:FE:2E:72:A9:30:8B:44:BF:87:3F:22:11:4F:E9:7D:B2:4D:B9:AD
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584953C44C65CC52B52C33F478E0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11290
IP address blocks: 199.193.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4c:65:cc:52:b5:2c:33:f4:78:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=02e71bd5-deec-4418-baf8-4863feb0ce64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:6e:7f:a2:68:1c:af:54:f3:89:3b:a8:b8:
97:67:1b:24:ce:a0:21:96:59:7a:40:2d:76:87:25:
65:a4:3a:5b:6e:56:4f:d6:42:4d:c2:08:de:5e:22:
65:b9:24:e7:25:77:f0:77:9f:51:01:5d:56:06:3b:
11:b2:6b:94:aa:96:58:7f:62:70:f0:e9:da:87:ed:
9c:78:51:fe:bc:18:d4:81:50:64:1b:46:57:43:e0:
42:70:6f:7b:97:e0:1b:e7:89:81:82:33:72:40:e3:
f2:1f:ea:9e:6c:1e:03:06:f9:19:da:76:93:e1:ee:
12:96:33:7d:eb:c5:a3:5c:c3:a2:41:f5:fe:f1:eb:
49:77:5e:33:8c:05:dc:16:76:7f:86:2e:c7:6d:79:
9b:7b:83:11:49:64:be:fb:7e:30:ba:53:5e:74:c6:
14:9b:75:82:d8:14:99:4c:1d:71:2c:09:9d:6e:52:
ac:01:8a:14:99:15:4a:1e:bf:ce:e4:92:5c:73:32:
40:24:41:39:36:7d:7c:02:73:85:f5:73:4b:47:b4:
1f:1f:91:85:cc:29:bd:83:28:95:f6:dd:12:09:80:
f1:48:20:0e:d1:cc:bb:a9:0d:50:bb:08:49:10:c6:
36:ef:06:4b:56:3a:61:30:6c:fc:aa:4d:bb:44:a9:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:2E:72:A9:30:8B:44:BF:87:3F:22:11:4F:E9:7D:B2:4D:B9:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
199.193.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:54:2d:af:35:90:1b:c1:91:4e:bf:c8:4c:ab:fa:25:98:42:
b7:5d:93:fd:e9:4b:c1:5a:a1:55:1e:8c:16:57:31:83:5b:13:
86:73:74:37:b0:4a:7d:79:69:c2:d4:25:c2:9e:d6:c3:54:54:
19:31:a1:00:bc:78:33:fb:e6:81:a1:0d:52:43:c0:27:ec:06:
1c:88:22:8e:b9:69:74:47:2e:d4:e1:12:96:0b:a7:3f:0a:9a:
d8:42:e3:c7:3b:00:4a:fe:8b:e0:c0:22:78:b6:99:eb:74:ba:
6a:f4:2b:40:e0:e9:a4:b3:c4:0e:bb:9a:81:88:f4:75:2e:96:
ef:e5:85:70:07:03:bd:91:1d:ae:72:b6:0b:98:46:be:7d:31:
13:31:f9:1f:90:d4:09:42:fe:a2:cb:79:80:75:14:7d:a3:0f:
7f:bc:21:79:7b:a8:13:80:11:46:77:91:11:c5:df:1a:ad:14:
d8:8a:4f:52:5b:b9:7f:1e:46:fe:1e:71:ca:6b:fa:ef:45:1d:
cd:95:42:1d:c5:43:24:60:b2:55:38:0e:f8:eb:93:e5:86:36:
50:85:ba:3a:56:a5:b2:85:8b:26:44:00:d9:3f:bd:29:83:23:
d7:b8:99:6b:28:fd:d4:f7:07:7b:7b:33:79:43:a1:15:6a:02:
5c:fe:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net