Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa
File: 49cb8b45-24ac-3df5-8192-267514fc0835.roa (raw, json)
Hash identifier: +J8w0ILZh9gT30gOp9zmt2LVBihZGaI+sL6Bi4aLMjQ=
Subject key identifier: 8D:24:78:32:B3:60:D2:88:92:B3:BA:FD:46:82:45:B2:99:C1:4E:7B
Certificate issuer: /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Certificate serial: 010D0C9F43285849350E9750748979AF8484ED60
Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 26677
IP address blocks: 199.212.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:97:50:74:89:79:af:84:84:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=123c4871-d6e0-45bb-8671-d0f896e5f3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:52:9c:9b:5c:27:ac:cf:fe:7d:02:de:86:
3d:5f:e1:71:5e:84:79:f4:72:ce:8b:81:9e:fe:e2:
e2:b7:07:d2:7e:8a:e3:61:a9:75:bd:ea:dd:0b:7c:
e9:4e:bb:16:0e:c4:ef:31:c2:f5:15:ad:04:d8:68:
1c:90:17:23:e7:22:4e:3b:37:de:36:66:e8:c0:9f:
2a:2a:9b:9f:d3:50:ab:68:b2:f8:a2:6a:4e:98:4a:
b3:98:4c:d5:fc:ee:35:d3:e0:f3:4f:13:93:5d:5f:
b4:9e:79:fd:32:6f:1a:2e:f0:fd:25:eb:34:76:c6:
22:f3:9c:34:ff:2d:f4:6f:aa:6a:cc:48:88:24:8c:
22:42:85:70:a8:71:a6:cf:f9:dd:cc:bd:7d:59:dc:
c2:77:af:41:e0:0a:0e:2b:bc:fb:3a:31:0b:73:77:
7c:10:4b:29:34:d6:66:ae:9f:0b:af:11:c8:df:9c:
59:2f:1d:99:2d:10:db:02:f9:0a:31:57:67:ce:29:
1f:f2:9d:a2:80:f6:fd:27:a2:bc:2e:7a:60:b1:39:
6b:bc:db:34:29:f3:59:0b:de:cb:53:ff:d3:85:6f:
ac:69:f3:49:f0:38:0f:fd:e8:7d:bc:a4:21:87:45:
a1:34:04:9b:5f:99:d3:2f:7a:33:34:c2:06:fd:d4:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:78:32:B3:60:D2:88:92:B3:BA:FD:46:82:45:B2:99:C1:4E:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl
X509v3 Authority Key Identifier:
keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:f7:c3:56:85:a5:8f:fd:29:37:2e:20:e3:18:95:5a:31:36:
4a:68:35:bd:26:b9:d6:80:4e:1e:59:7a:98:81:e5:94:a1:a3:
89:37:e4:58:85:da:5d:4f:28:03:6f:c8:2f:11:4c:25:25:c5:
75:e2:1c:3d:d9:26:6e:ba:98:e2:df:13:ab:79:8d:c2:9c:e3:
03:3c:5d:3b:f4:82:07:51:4a:d6:e9:d0:6c:48:70:78:1b:8f:
6d:0d:8a:12:75:2b:df:6c:f1:a2:a0:37:42:c8:26:61:81:9d:
8b:01:31:30:56:be:ce:a3:59:03:63:e3:b8:7c:fa:48:f8:62:
a8:3d:7e:1f:25:b9:ef:a7:bb:24:cd:16:51:2e:86:5c:04:6e:
e7:94:5c:c7:c7:dd:44:d2:95:47:5a:69:4f:14:84:a9:c5:2c:
5e:3e:3b:01:b2:0b:6d:ea:27:8d:26:25:93:53:0d:f1:0d:7d:
00:b1:e9:93:8d:c2:64:b2:dd:0c:65:83:b7:46:3d:b6:96:95:
39:0f:bf:7e:25:61:27:d5:d6:92:71:85:16:ce:56:0b:e8:ea:
7c:6a:ee:97:4b:e2:95:f7:be:aa:32:4d:a5:1c:5d:df:60:c4:
e1:31:f4:d3:b9:6a:cd:46:75:a8:95:05:89:06:18:98:25:24:
68:98:fa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:15 2025 by rpki-client on console.sobornost.net