Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa
File: 888b4e53-c390-3724-b441-2f69dabf74f6.roa (raw, json)
Hash identifier: iWRM424YrzlQ6P6A0Z61aLmADb0Ha0/5EJKNGYr0G2U=
Subject key identifier: D9:A1:7A:1F:98:E9:A9:B5:C5:40:15:B2:32:5F:49:CB:A1:B6:90:4D
Certificate issuer: /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial: 010D0C9F432858494352E4C0EAA03453ADD7E140
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa
Signing time: Fri 21 Mar 2025 15:40:00 +0000
ROA not before: Fri 21 Mar 2025 15:40:00 +0000
ROA not after: Thu 19 Jun 2025 15:40:00 +0000
asID: 21859
IP address blocks: 209.97.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:52:e4:c0:ea:a0:34:53:ad:d7:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Validity
Not Before: Mar 21 15:40:00 2025 GMT
Not After : Jun 19 15:40:00 2025 GMT
Subject: CN=d4f2fbf2-079f-4205-bca4-2083a75a8790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b3:cb:db:c6:2c:17:64:73:3d:88:ae:7a:4b:
40:d1:29:ad:65:ef:a0:47:a3:9f:76:5f:8d:42:4c:
5a:16:63:aa:80:bb:c6:93:c6:47:01:11:ed:ca:8e:
9f:de:00:25:0c:c4:f0:1b:7d:a6:6f:f8:21:99:19:
1d:09:bb:d2:4b:c4:45:86:4a:17:11:16:f0:39:cd:
b7:9a:f1:c9:77:e9:c1:55:84:f4:0f:84:dd:74:d2:
72:5a:76:28:47:4a:37:d7:37:11:41:4e:86:14:12:
6c:a3:66:64:aa:74:43:59:6b:68:e5:37:79:dc:74:
8b:5b:a7:a8:62:f8:a9:b4:4c:f9:79:19:ec:a4:e6:
cd:cf:c6:1d:40:14:d9:1f:fb:0d:86:36:3b:86:ca:
e4:ad:55:25:7e:21:e1:a5:88:21:ca:41:4d:2c:c0:
59:cf:21:b1:2f:8b:0e:f0:b9:bd:8c:e3:a2:a0:95:
c2:1c:8d:41:ee:5b:e5:de:35:f5:f9:8d:6f:71:65:
95:88:2c:aa:ab:97:42:4f:ac:73:3e:72:27:65:2c:
22:3e:18:1b:96:ce:c8:51:22:75:4e:f3:e8:de:9f:
d2:1e:74:8f:4e:ec:79:70:04:31:4b:56:6c:73:de:
7b:e8:42:69:4a:d6:19:d0:f5:e0:a8:4e:f0:8f:a6:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A1:7A:1F:98:E9:A9:B5:C5:40:15:B2:32:5F:49:CB:A1:B6:90:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
X509v3 Authority Key Identifier:
keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
sbgp-ipAddrBlock: critical
IPv4:
209.97.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:3c:be:af:0b:bb:32:4f:2a:9e:06:38:6e:12:83:3c:b9:f3:
a3:a8:cc:a0:44:82:2b:2e:ab:8f:80:b5:cb:c5:19:3e:a9:38:
98:ca:9c:7f:5a:fa:5d:42:59:41:b9:46:43:6d:e2:69:e9:cb:
e1:63:76:55:38:a8:51:5e:64:82:ac:cc:2b:19:cc:6b:9e:60:
67:57:4d:39:15:b2:fe:f2:09:4e:b2:72:50:58:a5:d8:6e:55:
fb:c0:19:60:3b:cf:f6:bb:37:41:76:ad:a8:b3:95:53:ea:d6:
af:df:32:93:55:8e:bb:c7:0b:8a:6f:9c:63:cb:a4:e6:0f:bf:
b3:ad:79:55:15:0f:c7:58:f0:3c:a5:f7:b3:bc:3b:8c:39:fc:
2c:8a:c7:63:e1:ca:72:09:fe:25:cc:85:aa:7c:c0:80:3f:7b:
bd:f4:40:59:cb:8d:c4:e3:41:40:ef:a0:ae:3d:d0:68:34:f9:
07:a7:43:2a:87:ae:22:e6:0a:46:3a:52:ba:45:2a:e0:38:6c:
b5:63:9e:ad:c6:f7:d0:06:54:05:6d:b9:d6:75:d6:f9:1b:4f:
dc:da:ef:79:9d:89:51:d6:05:35:25:47:e8:ba:4b:12:7a:60:
a4:48:2e:ac:f9:b8:de:0f:93:2d:f5:d0:59:52:7a:62:25:ba:
c9:99:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:12 2025 by rpki-client on console.sobornost.net