
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
File: f4f0a900-b310-382d-b883-64f958388735.roa (raw, json)
Hash identifier: FJdikcdILu2M6BiBa2nTuTI6hMaqsKBwy+Dz7Tb15As=
Subject key identifier: 32:40:02:93:1C:DA:35:21:2F:09:0B:76:1E:70:49:F1:1F:E3:C2:1F
Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial: 010D0C9F4328584921841130DEA5192AC7B11800
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 26744
IP address blocks: 199.166.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:11:30:de:a5:19:2a:c7:b1:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=02fd5e70-543c-4ca1-930a-81392158a19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:04:64:79:f6:6f:4d:c6:47:95:12:53:bc:af:
12:0d:f8:ac:54:16:ce:b0:b6:bc:df:7a:b0:5b:93:
36:0d:02:85:58:91:15:3e:32:7d:b2:33:9e:08:9c:
3d:40:22:31:82:98:52:cd:36:59:0d:c2:e0:f3:e7:
e8:e6:67:eb:6c:4a:f0:55:92:9c:b0:24:3c:0b:a3:
63:7c:ce:01:d9:e8:0f:3f:1c:66:f8:82:9c:93:c8:
02:c2:4e:5e:e7:6f:ca:28:28:9e:21:9d:7a:14:bc:
43:7e:29:0f:d5:b7:33:7b:78:12:ef:ce:1d:82:9c:
af:0e:cc:c9:26:e1:a0:98:0a:b7:8e:a9:f2:9b:27:
be:c0:0b:1d:61:98:c9:42:f5:93:63:05:97:9c:b8:
b8:cb:7a:d2:ae:c3:22:e9:45:68:d0:4f:3a:0c:bd:
a1:30:10:02:60:85:6b:7c:84:be:02:53:49:d8:31:
e4:f8:e4:10:52:ad:6c:53:94:e9:d7:1d:7f:f3:f6:
68:49:36:42:59:6c:9f:df:54:30:5b:32:ef:51:2d:
e5:e2:00:e1:54:b4:4f:47:18:5e:31:8a:0e:9a:4b:
7a:14:db:c6:51:6c:5e:13:8c:26:c7:10:8c:84:3b:
1d:d1:50:f2:b3:04:ae:0b:44:40:b0:79:55:7e:f3:
b7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:40:02:93:1C:DA:35:21:2F:09:0B:76:1E:70:49:F1:1F:E3:C2:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
X509v3 Authority Key Identifier:
keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.166.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:77:e9:e0:c5:bb:df:da:f6:3a:ea:70:92:b9:5f:18:c3:5a:
2b:83:43:11:3d:60:3d:ba:03:99:9b:32:29:72:9d:2c:01:12:
e4:1f:e6:99:b4:73:44:80:13:48:ed:8a:f2:8d:0d:2c:36:a9:
cc:7b:da:83:b5:34:5b:82:86:57:c4:93:27:fc:a4:8c:9f:d6:
92:6a:3a:1d:3e:9e:a5:27:5f:8b:be:25:9f:af:3e:d6:1d:a9:
32:58:22:2e:64:c7:3d:b5:07:2b:2e:14:09:29:e7:30:5f:f5:
7e:82:fa:cf:45:02:f8:d1:f2:a3:ed:28:36:ca:34:b4:c7:db:
55:4c:b1:39:bb:59:75:e1:48:57:50:99:7c:7a:c7:0f:02:b1:
11:89:74:e5:10:3d:0e:79:e1:a0:06:92:81:ed:ea:82:37:78:
ad:56:ec:99:ce:81:5b:81:40:64:cd:ad:41:a1:2c:fe:df:3b:
83:09:0a:0e:99:23:4e:71:b1:f8:3a:3e:7d:de:d6:84:c4:c5:
55:7d:45:34:d6:59:cc:4d:3a:8a:b6:54:7a:f7:77:b0:18:da:
39:86:6e:56:33:49:f8:a2:d5:70:ed:f0:bc:44:ff:0b:62:a0:
30:86:1c:be:e7:07:17:e9:36:31:b3:5c:9c:d9:07:4c:14:9f:
13:29:dd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:57 2025 by rpki-client on console.sobornost.net