Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
File: 6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa (raw, json)
Hash identifier: weSIo9+7hDiq7XZLK/NAu38fZPK3CyTR+NT+cjEc7Bc=
Subject key identifier: 6E:46:D0:E5:88:A5:D5:D5:BF:04:03:1B:57:89:EE:73:DA:0D:B5:99
Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial: 010D0C9F43285849244E67D394F7B0ACDB92C280
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 2572
IP address blocks: 150.199.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:67:d3:94:f7:b0:ac:db:92:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=53fc9136-5706-47ae-a9ae-30cc45495606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:07:b7:e5:bb:9a:ed:da:3c:f1:a6:f3:92:
e1:8f:61:07:04:85:e6:06:1b:80:4f:1b:10:d2:dd:
14:4c:52:74:68:96:f9:ff:99:82:34:14:a4:9b:6f:
e6:63:41:ce:58:c1:06:12:b2:15:aa:e4:09:ef:07:
00:93:d4:a5:87:fc:29:7b:8a:58:e5:60:4f:e1:23:
26:b8:8e:d5:76:23:41:e7:8d:28:0f:71:a6:78:e4:
ab:ad:b1:f3:76:d6:44:f4:ed:ac:d3:23:3f:bc:10:
ae:03:c9:3e:00:0e:0f:3a:d0:b1:ab:13:45:bf:dc:
f6:ae:1d:b8:d3:f1:9c:fc:02:7d:51:52:81:40:e2:
2c:e7:43:bd:24:8b:18:df:80:18:53:5f:53:06:86:
84:9b:9b:dc:ae:52:3a:87:5c:d3:e0:a9:92:ba:21:
b6:a9:7a:38:6a:67:12:95:bb:0f:77:d7:25:b9:83:
a2:14:a7:47:9c:26:d1:01:97:ed:78:17:cf:42:8f:
5c:d1:a8:58:c3:51:3d:d7:41:86:97:3b:2a:28:89:
75:b2:0f:15:ce:f9:44:98:51:c8:d4:a8:b4:d8:33:
58:ae:24:5c:56:69:8c:c7:3e:5e:8c:1c:f9:b7:0d:
5d:5c:d5:ca:78:25:3b:04:fb:63:59:80:65:87:29:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:46:D0:E5:88:A5:D5:D5:BF:04:03:1B:57:89:EE:73:DA:0D:B5:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6e935ba7-eeed-3ba5-9a90-345c4292fbd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
X509v3 Authority Key Identifier:
keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
sbgp-ipAddrBlock: critical
IPv4:
150.199.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:75:3f:25:3a:31:f3:14:54:77:2a:d6:d6:3b:85:b5:5a:8f:
3e:2b:80:5a:d5:1f:5b:a0:52:09:40:aa:4d:e3:ed:cf:57:bd:
ad:f9:f1:44:db:ee:27:38:e6:2a:61:71:6a:98:f7:a3:9f:0a:
c6:87:27:32:b1:73:7e:01:53:85:a4:f8:62:76:5b:35:fc:a8:
b8:b9:64:24:da:fb:49:a3:78:24:9b:1b:02:af:2a:3b:9d:61:
48:24:8c:d7:3b:b9:15:05:6a:52:d4:81:1f:bb:73:dd:39:e0:
c7:bc:23:f1:73:c1:53:74:6d:73:8a:11:18:9b:6f:ac:c0:30:
62:b9:ef:37:91:af:62:de:74:34:dc:bd:bf:57:43:fd:c9:81:
84:f2:85:31:6a:76:c5:6b:7d:9c:31:6d:b8:24:6c:3c:10:7e:
57:4e:14:69:3a:53:0e:39:21:32:38:dd:28:60:9f:4e:49:03:
b1:8c:57:ed:00:82:9a:23:31:22:07:1f:82:b2:7a:f1:fd:43:
04:50:c0:24:10:d6:c8:de:05:fa:c0:93:55:0c:99:0f:95:38:
30:f7:f7:8e:f7:e6:97:42:8f:e0:dc:be:6a:25:f1:46:90:7a:
01:fd:be:a9:bf:6f:3d:92:cb:a6:af:62:54:58:51:92:8c:b8:
67:ab:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:14 2025 by rpki-client on console.sobornost.net