Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa
File: 6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa (raw, json)
Hash identifier: VqEnU1vCKNtj185L/Rnz48E/L66IItZLGtysJiz0jRs=
Subject key identifier: 66:BF:0B:D7:4C:3F:5F:57:8B:BB:42:02:C4:75:04:99:5D:8F:AB:99
Certificate issuer: /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial: 010D0C9F432858494CC94CA989D66005A85382E0
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 3464
IP address blocks: 199.88.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4c:a9:89:d6:60:05:a8:53:82:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=48786759-9af7-4b4e-9fbc-aba9ec84e97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:28:81:33:b4:78:32:19:86:a9:2a:73:60:5f:
b0:f4:c8:7f:59:bb:a3:fd:06:89:62:70:d6:5c:cb:
23:9d:eb:11:c7:c2:95:04:de:15:44:bd:3c:07:10:
f5:91:3e:63:d4:a5:48:44:37:f8:cf:28:9a:37:0c:
62:6f:a1:01:fd:ec:91:d3:1b:1f:5c:ac:19:b3:13:
8b:cd:b1:05:80:58:9f:ea:0e:8a:02:e9:52:5b:e4:
67:be:f1:e0:03:fa:fc:36:d5:35:37:d0:e8:a2:48:
23:6b:a6:e5:0e:82:4a:95:7e:89:10:57:13:9d:ff:
55:62:eb:36:fd:01:37:b1:f3:9c:01:8c:f1:6f:db:
b7:92:15:0a:50:58:cf:a0:cb:0f:f9:ae:7b:e8:8e:
c1:76:06:e9:b7:19:df:29:f5:6a:7e:60:9c:54:87:
94:71:cd:ad:82:21:47:34:16:f5:be:48:a9:0f:a9:
2b:a7:4b:19:65:6f:ad:7b:87:cf:f4:71:38:2a:75:
54:e2:dc:53:7f:cf:fd:89:5b:cb:81:57:68:27:a1:
36:ba:43:73:07:cb:46:40:e2:59:05:d9:2a:08:7b:
8e:ed:4c:44:fa:30:35:f7:f2:19:24:22:1d:ff:6d:
69:ee:ff:81:7a:81:27:3d:31:ae:9c:e7:6c:6b:98:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BF:0B:D7:4C:3F:5F:57:8B:BB:42:02:C4:75:04:99:5D:8F:AB:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
X509v3 Authority Key Identifier:
keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
sbgp-ipAddrBlock: critical
IPv4:
199.88.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:dc:5b:60:64:f9:26:45:b5:6f:a1:8b:d3:fa:5d:6d:5b:f5:
90:16:ba:ae:3f:d5:81:a7:65:7b:d6:e2:f1:d8:d9:8d:24:59:
04:62:dd:58:bf:87:4f:ba:e4:ba:1f:48:cd:7e:96:ee:90:81:
4a:18:0b:f2:e6:96:f7:75:f1:1f:a6:e0:9a:4b:c7:8c:67:42:
d9:e3:b2:29:be:11:97:23:fa:e7:5b:7a:77:1f:63:27:37:b9:
ba:64:df:c7:d5:fd:ed:e1:c6:1b:4f:e9:40:3c:5f:7a:65:41:
67:39:0d:ec:b3:7b:81:0b:55:50:1e:e0:f2:da:ac:aa:91:78:
51:1f:0f:ca:23:cc:29:37:13:d5:60:fc:f1:83:7a:a3:44:44:
67:8b:d9:e5:b6:b9:ca:94:d8:2d:82:39:39:10:0f:05:96:f0:
5c:54:b6:3c:a2:1e:2a:bf:04:5a:97:cc:73:e1:c0:31:cb:96:
eb:45:8d:77:37:1c:04:82:53:1d:86:88:3d:81:f6:d5:9d:e5:
82:c7:af:2c:92:12:3a:98:44:6e:29:48:39:c5:21:47:46:10:
08:69:d4:d4:60:d0:47:06:f2:42:97:55:b5:a8:4d:a6:a6:f6:
90:6d:1f:1a:b1:21:f6:97:0a:19:aa:11:60:02:30:bf:29:de:
4a:21:4e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:21 2025 by rpki-client on console.sobornost.net