Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa
File: 03efb475-2734-343c-823b-4efaee05cc2c.roa (raw, json)
Hash identifier: IQHFVUrlsTdYeLi8vMjTbWNEmbvlo/Gde8fPW6SZKxw=
Subject key identifier: 50:05:EC:2B:D1:79:22:EB:AC:CD:38:91:03:25:2C:8E:FF:55:13:8A
Certificate issuer: /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial: 010D0C9F432858491246B421CA3AD7F6E29DBE40
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 11978
IP address blocks: 199.255.252.0/24 maxlen: 24
199.255.254.0/24 maxlen: 24
199.255.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b4:21:ca:3a:d7:f6:e2:9d:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=42edb3d0-a758-4c2f-9f98-1dd80c1cdda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b4:5e:ec:02:60:eb:25:b7:6b:a8:6f:18:a9:
2b:be:2a:33:3d:46:8c:13:96:24:ec:66:be:ee:32:
30:c6:51:51:a5:51:2d:8f:89:92:8e:f9:cb:30:df:
7b:45:8c:88:81:c0:17:35:d7:03:c4:0d:4b:84:6d:
87:6a:e5:3e:5c:e7:63:6f:72:8d:7a:d6:aa:29:0c:
f6:fb:ec:39:29:87:83:3b:b1:50:c8:7c:4a:42:93:
4d:07:a1:79:e0:43:55:a4:40:c9:46:99:88:56:55:
14:d3:51:e0:43:d5:69:e3:27:98:e3:e1:c0:6a:59:
aa:ee:be:10:e4:d2:b4:ce:a4:f0:3d:24:1c:35:02:
0d:e1:79:ad:1b:61:0c:f5:c5:ce:bc:8a:20:53:de:
cf:ed:f5:bf:8b:01:be:84:18:1e:b4:52:e1:7a:c6:
bd:20:f8:56:86:59:9b:24:88:fb:1e:3c:51:44:62:
31:a1:f8:c3:05:19:81:01:97:cf:80:e0:d9:c2:0f:
c1:0f:bd:2f:75:be:ce:c9:f7:96:fd:40:34:ff:e4:
ef:1b:47:10:40:b1:f8:80:7f:24:68:b9:d3:25:61:
da:da:c0:19:9e:9b:b4:7b:76:13:36:0a:ec:17:51:
54:7d:ae:1e:de:7b:aa:46:97:5a:c0:ec:89:c9:03:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:05:EC:2B:D1:79:22:EB:AC:CD:38:91:03:25:2C:8E:FF:55:13:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/03efb475-2734-343c-823b-4efaee05cc2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
X509v3 Authority Key Identifier:
keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.252.0/24
199.255.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:ef:2c:78:72:4d:e0:3a:cf:90:b7:e2:a9:ab:dd:4e:20:53:
8b:1c:0f:5a:10:34:37:f5:20:59:5a:f9:61:33:03:ae:f2:8c:
d5:c1:4e:8c:14:28:1e:88:51:a6:6e:2c:9d:d8:c8:ff:ea:7e:
95:8c:c5:86:7e:17:bc:98:6b:bd:ec:3d:ea:5f:47:9a:61:31:
40:bc:b4:d1:c0:af:da:1e:35:c3:91:fc:a5:a5:35:3f:ad:44:
b9:45:4d:aa:49:d5:d1:c0:0c:fa:b0:aa:a2:90:a9:8b:f9:0d:
9e:db:80:23:7c:84:04:02:d5:3d:f1:54:3d:08:a1:57:90:3c:
97:66:ba:69:95:c6:d1:fb:b8:8c:6f:87:a4:60:a9:f9:12:28:
2e:20:3c:e5:40:9f:ec:50:46:e0:f2:f6:48:19:b0:42:89:bc:
e5:d6:49:60:ea:1c:ce:17:5d:2b:ab:3a:f7:07:72:07:90:84:
fc:2b:71:6d:dd:ac:57:15:4f:7d:e5:5a:ba:6c:bd:fd:f6:e8:
e0:ec:61:79:5c:68:55:e6:78:a1:d9:ba:f6:2a:3d:6d:9b:ef:
cc:98:73:55:0e:1f:1c:1f:0a:c5:e6:3d:98:e7:67:15:4f:df:
f6:0b:7c:d8:2e:09:50:ab:7f:50:68:7e:e4:ab:9d:ab:67:16:
a2:48:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net