Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa
File: 1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa (raw, json)
Hash identifier: ZG1TMIo7EPdXexi6aC0HXVDXtJ+0g2HO1wMEjRJMihg=
Subject key identifier: E1:7B:17:3B:A9:F1:4A:03:5A:DA:E6:B1:6E:AA:C6:EC:13:E2:6E:65
Certificate issuer: /CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
Certificate serial: 010D0C9F4328584976A993425976E1E6C8B9DD80
Authority key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 7896
IP address blocks: 216.128.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:93:42:59:76:e1:e6:c8:b9:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=3446bbcb-acb5-4572-82a4-bb0e57200760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:59:fd:e4:84:27:7d:e8:ba:c9:30:cf:9d:40:
e9:13:45:4a:14:78:8d:6b:bb:35:08:dd:3a:64:f7:
d4:e5:96:7b:b3:51:02:fa:6e:b7:cb:9f:af:4f:e3:
f2:0d:4f:02:6f:33:27:24:d4:13:5f:e5:40:60:a6:
8c:a3:60:37:19:b4:f3:5f:e0:c0:79:b2:de:2d:5c:
16:1a:4a:16:97:cd:86:da:d5:4a:fe:6a:f2:8e:58:
3d:ef:2b:88:26:ea:d5:02:61:d0:36:3e:66:61:cc:
4f:35:25:a9:d7:4a:2e:c6:73:ff:ec:21:53:7e:fd:
f0:50:38:c1:ed:d5:85:a0:35:c4:86:2d:32:35:1a:
42:24:ec:ef:cf:2c:95:08:32:90:09:5a:9c:46:ca:
fb:d0:d4:b0:67:cf:68:95:15:37:01:2a:7c:ea:72:
48:7b:87:9d:8a:7a:4e:07:e4:11:f8:0d:fa:ae:48:
37:aa:74:5b:68:75:a4:3b:30:2c:3c:60:d4:36:c1:
2d:3e:1e:2e:f4:e7:6a:b5:16:66:78:9e:aa:95:79:
e5:72:40:f0:44:86:16:e9:d4:d6:67:e2:5b:87:80:
21:c9:51:7f:40:9d:32:4a:c5:f8:6a:51:50:af:92:
86:fe:94:6f:2b:ca:63:4d:3a:3c:d5:3b:57:8c:db:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7B:17:3B:A9:F1:4A:03:5A:DA:E6:B1:6E:AA:C6:EC:13:E2:6E:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl
X509v3 Authority Key Identifier:
keyid:28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
sbgp-ipAddrBlock: critical
IPv4:
216.128.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:82:25:e2:d6:24:5e:16:a7:7e:27:c4:f0:45:ba:fb:23:70:
46:e7:35:58:fa:0c:fd:e6:3f:22:8a:df:59:a1:4c:7f:69:f7:
44:84:be:a6:47:9e:48:9b:50:81:9c:4e:53:96:26:94:f1:a0:
39:fb:3f:51:04:da:5b:05:f3:63:f4:c4:f8:db:17:e3:08:ad:
9c:0e:67:4e:7a:2e:e6:a0:90:f6:27:ff:17:2c:3f:5d:53:3e:
e4:d5:5d:a4:c4:75:a2:2e:65:b2:40:84:68:de:cf:0b:fb:13:
8a:2f:38:8e:fc:64:dd:fb:b8:1e:d0:cc:4d:d3:e6:5a:16:7b:
7f:ce:18:a5:d7:c3:f1:c6:54:aa:01:2f:56:30:0d:13:66:43:
70:a5:16:ad:38:7a:a5:46:bd:17:ab:5b:d6:80:89:ab:9b:3e:
a1:e3:3f:c3:fe:6d:f8:6b:32:2e:d9:62:4d:d5:55:0c:f0:41:
bb:d1:78:1f:3d:06:8f:30:58:f0:35:6d:30:59:65:f2:d4:a4:
a2:64:bb:0d:b9:51:19:68:5c:db:df:cf:2c:23:f6:ea:0b:c9:
06:56:be:19:eb:22:3a:33:24:c2:af:f6:a0:6e:5a:2b:40:00:
82:54:bd:72:24:84:cd:d7:22:87:af:4e:7b:60:16:d7:36:54:
cb:16:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net