Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/9934cfe6-fc35-34fc-88a9-e889a4f52e10.roa
File: 9934cfe6-fc35-34fc-88a9-e889a4f52e10.roa (raw, json)
Hash identifier: Xmt3zlmv0KF8V386YdW5A3+cDVftx45aLGl1+15IRsQ=
Subject key identifier: 03:37:74:92:4B:63:82:BB:6E:9B:F3:4C:5C:2B:A7:A7:DE:CD:9F:BD
Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial: 010D0C9F432858495EEEEFCC57BAA52D829475A6
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/9934cfe6-fc35-34fc-88a9-e889a4f52e10.roa
Signing time: Mon 31 Mar 2025 13:00:59 +0000
ROA not before: Mon 31 Mar 2025 13:00:59 +0000
ROA not after: Sun 29 Jun 2025 13:00:59 +0000
asID: 401416
IP address blocks: 162.212.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:ee:ef:cc:57:ba:a5:2d:82:94:75:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Validity
Not Before: Mar 31 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=05b04333-dc22-4f19-817e-f634526afd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ee:db:08:0a:19:0e:29:d3:4d:a4:10:10:ca:
3e:74:11:51:0c:16:3f:d1:ac:8c:55:51:4a:65:b4:
9a:3b:44:f5:bb:2c:c7:95:44:c5:cf:7b:c6:de:c3:
98:18:8c:7b:a1:cb:98:3d:40:b3:a4:51:24:04:c9:
81:fa:8b:f3:d6:3b:1f:d1:48:51:3f:43:10:97:61:
6f:9a:64:91:0d:f6:6f:39:de:ca:f8:77:70:b1:a2:
e5:91:0e:5f:c8:d3:6c:61:19:15:02:08:40:e2:d8:
78:cb:af:ea:17:d7:18:e8:56:57:a4:e1:fc:97:16:
95:36:06:81:54:dc:6c:1e:f9:20:4e:d9:22:f8:41:
7c:3f:ff:1b:49:f2:30:bc:bb:14:13:7b:05:5d:4c:
36:b2:e0:9b:cb:6c:a0:a9:aa:f6:3a:df:44:dd:14:
86:84:48:dc:76:70:17:f6:13:77:a1:a9:85:58:07:
60:74:03:d4:7b:c7:8d:0e:66:a4:74:fd:1a:c5:dd:
6d:4a:2c:48:ca:99:7c:db:f6:56:f1:d1:19:8f:5e:
20:54:c9:44:f5:3b:f0:a1:ea:7d:41:e8:0a:22:ed:
20:52:56:45:cc:be:af:d9:38:b7:c6:7a:f5:bf:d9:
fd:51:c0:1d:35:15:b4:37:5a:6c:40:0a:33:aa:d5:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:37:74:92:4B:63:82:BB:6E:9B:F3:4C:5C:2B:A7:A7:DE:CD:9F:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/9934cfe6-fc35-34fc-88a9-e889a4f52e10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
X509v3 Authority Key Identifier:
keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
sbgp-ipAddrBlock: critical
IPv4:
162.212.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:32:0c:bf:d2:e8:67:93:26:9d:15:da:f0:68:8f:1c:5f:22:
65:8d:76:03:4e:59:ed:e9:e1:be:69:ba:8c:14:3f:2b:01:0a:
fe:50:51:fd:9a:ce:d1:48:d9:46:22:1e:d3:ff:37:ed:58:cb:
e9:27:24:32:2c:25:e6:c6:a7:5a:4e:bb:27:c1:b5:ff:5a:a0:
59:0a:b3:93:d8:44:11:6f:64:85:4c:1b:f9:87:74:e9:84:e5:
4f:c1:01:ee:91:02:3a:5d:16:f2:8e:aa:53:5e:cb:1f:dc:f9:
ba:2e:b9:9e:3e:c8:70:13:aa:dd:97:95:48:c2:ce:c6:9f:c7:
a2:38:8e:92:86:12:2f:90:df:2b:d0:a0:b8:d5:4d:36:1e:f4:
a3:0c:8d:15:44:d2:33:45:49:a0:12:e3:ff:f6:69:7c:89:05:
c2:73:aa:2e:cc:3c:d3:02:35:93:a3:5c:a0:22:b7:36:0a:a7:
05:7c:66:56:cb:70:2c:bd:f1:dd:f8:5b:e9:29:6b:46:99:56:
39:bc:88:e5:1f:fc:58:8a:33:d6:7e:9a:38:99:cf:e4:4a:4d:
92:aa:3f:91:8c:12:44:0f:76:51:ba:df:36:b1:2b:06:1b:91:
62:24:7d:f2:d1:f9:9a:19:87:93:01:8a:d5:13:4a:ab:2c:3b:
59:f3:0a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net