Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa
File: 541b454a-f70e-3454-bcae-4a7dff7be3ef.roa (raw, json)
Hash identifier: SJyhQaa7hk2e26i1QDvZhcXHL4hR0vgNH99BkB2ZKvQ=
Subject key identifier: C3:69:DA:6B:A4:CF:4A:FF:22:05:81:F5:EB:6D:15:F5:CC:E0:B2:DC
Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial: 010D0C9F432858495EEEEFF8CEE6F96BFB8B4BE0
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa
Signing time: Mon 31 Mar 2025 13:00:59 +0000
ROA not before: Mon 31 Mar 2025 13:00:59 +0000
ROA not after: Sun 29 Jun 2025 13:00:59 +0000
asID: 14618
IP address blocks: 162.212.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:ee:ef:f8:ce:e6:f9:6b:fb:8b:4b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Validity
Not Before: Mar 31 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=1c142c3b-56cb-4753-bde3-894f248ee95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:a9:d4:22:30:4c:10:a4:79:7d:0b:68:cf:
f5:3e:8b:13:12:a6:fa:48:66:ae:8d:e0:cb:87:e1:
26:0c:48:09:a8:00:8b:99:f7:85:e3:5f:72:45:30:
be:42:b0:a6:f3:ab:22:76:c8:ef:60:b1:e6:79:ab:
59:9f:7e:78:15:05:33:4e:9e:17:3b:8d:8f:e3:73:
ef:9d:cb:cf:18:d8:6a:ae:25:e5:77:94:d6:11:7f:
a7:fe:92:f7:41:b4:22:0a:7e:ea:8c:59:0d:c6:55:
5a:51:45:09:a7:53:84:2f:fa:17:6d:26:d8:6a:61:
dd:d1:2f:b2:b8:5e:fc:dc:0c:f3:81:ac:4d:f4:f1:
80:87:3e:0d:d6:cd:67:77:b9:72:5a:54:0e:32:b2:
66:45:ee:f1:01:24:54:b5:9c:22:2e:84:0a:e1:bb:
72:1a:a2:2b:50:2a:72:b5:2f:a7:92:3e:c0:96:77:
52:18:b1:d8:56:e9:a4:29:28:14:81:be:3c:4b:b2:
41:ec:43:37:fb:af:d3:04:f5:3a:cf:43:45:06:6d:
82:27:bb:37:86:c0:d9:31:12:9a:f2:85:5d:24:5b:
86:fc:79:fc:96:78:e1:a4:b5:b8:92:a3:16:70:9f:
e8:aa:9c:df:22:87:42:9f:ad:15:9d:aa:91:18:c0:
c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:69:DA:6B:A4:CF:4A:FF:22:05:81:F5:EB:6D:15:F5:CC:E0:B2:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/541b454a-f70e-3454-bcae-4a7dff7be3ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
X509v3 Authority Key Identifier:
keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
sbgp-ipAddrBlock: critical
IPv4:
162.212.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:02:7e:cb:02:32:74:d5:82:6a:36:7b:60:eb:28:c0:bd:4d:
54:b4:43:7f:14:06:ec:88:35:8d:2f:f7:de:75:24:47:9d:37:
80:b4:81:43:14:3f:a2:13:19:fa:fc:46:02:2d:f1:bf:d5:ee:
2f:f1:97:01:62:a2:f5:00:b3:c0:68:ae:11:4e:00:ce:be:05:
ac:1b:81:88:04:58:14:2c:49:ab:e3:b2:95:0e:b1:d5:78:f4:
aa:5c:55:df:28:96:59:ba:3f:ac:fe:ad:38:cc:78:88:97:13:
e4:e0:42:9d:76:e3:87:35:4d:c1:5c:d5:c5:1f:69:a7:bd:97:
84:de:13:73:25:8b:f6:89:d9:74:82:64:04:b5:67:f4:56:1a:
4f:fb:88:da:72:b5:23:1f:63:eb:3f:0f:9c:d5:76:d5:38:61:
a0:1e:18:d3:50:5b:96:be:47:7c:d9:ca:82:6f:06:06:d5:e4:
8d:20:c3:db:dc:25:a9:97:fa:e8:58:63:bd:c5:ce:28:e5:a0:
44:b9:59:36:68:93:bf:ab:df:3c:3a:9f:52:24:5d:2a:a8:b2:
1d:61:d3:06:4c:5d:17:6f:47:d4:0d:65:67:dd:e2:72:16:bd:
ad:69:20:3d:ef:db:a5:e9:f3:78:c4:77:a9:18:14:a5:1c:36:
cb:af:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net