Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/860f9ef3-7893-3281-bde7-c793829fceca.roa
File: 860f9ef3-7893-3281-bde7-c793829fceca.roa (raw, json)
Hash identifier: tG2/qp8cSXsoyX/ajVdRzdelzvh30NpzgPSLPXY5U8k=
Subject key identifier: B4:A0:FB:DA:E6:EA:04:2F:79:7E:32:78:A4:46:99:A3:23:D9:78:14
Certificate issuer: /CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Certificate serial: 010D0C9F432858482C48F5C8695C7250B473C8C0
Authority key identifier: B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/860f9ef3-7893-3281-bde7-c793829fceca.roa
Signing time: Wed 11 Dec 2024 16:49:28 +0000
ROA not before: Wed 11 Dec 2024 16:49:28 +0000
ROA not after: Tue 11 Mar 2025 15:49:28 +0000
asID: 401041
IP address blocks: 192.25.8.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:48:f5:c8:69:5c:72:50:b4:73:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Validity
Not Before: Dec 11 16:49:28 2024 GMT
Not After : Mar 11 15:49:28 2025 GMT
Subject: CN=1867e2b0-93b0-42e7-a433-f65beafcac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:0b:32:77:5d:2e:53:5e:93:b1:f7:f5:59:
f7:72:51:7a:70:ea:ad:83:cb:3d:b7:aa:33:91:d7:
da:a7:36:e6:bb:9b:d3:c0:c7:27:14:c4:cf:c1:7a:
f8:aa:24:de:db:79:d8:3a:1e:68:f8:2d:45:1e:8c:
71:f9:0c:6f:18:18:41:dc:7c:b6:ad:4a:8c:b6:68:
8c:1c:22:d1:db:f3:84:29:26:60:bb:19:7e:cc:70:
9b:00:96:41:cf:fd:29:c5:a5:b9:22:8a:31:3e:d9:
33:f4:e5:5a:ec:85:c0:b3:a5:54:ab:7c:3f:60:02:
73:c8:6e:88:c7:3a:a6:9d:af:98:54:1c:10:60:ce:
55:7e:ee:34:8e:0c:e3:a5:67:b4:c7:51:ef:8d:66:
a7:cb:b5:46:7c:70:f0:24:9f:dc:36:cb:46:a9:91:
cd:dd:67:79:71:98:1c:5a:f8:31:f6:a7:51:d5:7a:
07:0c:1e:18:5c:25:c9:2a:86:c7:f3:23:dc:5e:e7:
83:0d:70:63:64:09:e3:4d:90:c6:14:21:f7:96:dd:
9f:8d:93:c2:ce:e9:19:cf:2e:ca:46:60:58:67:ab:
b9:fc:5c:81:e6:1f:e8:6a:f5:33:a4:67:48:13:35:
ab:31:a4:8b:11:0d:6b:8d:25:10:49:74:45:c8:47:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A0:FB:DA:E6:EA:04:2F:79:7E:32:78:A4:46:99:A3:23:D9:78:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/860f9ef3-7893-3281-bde7-c793829fceca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl
X509v3 Authority Key Identifier:
keyid:B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
sbgp-ipAddrBlock: critical
IPv4:
192.25.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:6f:5c:af:0f:7a:c6:2b:3c:fe:fb:f3:a9:8b:27:0f:0c:44:
1d:55:fb:0b:32:ed:7a:e6:27:fa:fd:3d:6b:f2:18:2c:1a:ec:
58:40:4d:0f:ac:91:d7:03:42:13:ab:16:a6:d4:53:10:d3:81:
5f:9b:b4:ed:ea:8a:14:85:4d:86:cb:80:91:03:cd:ef:e1:bf:
30:ae:b1:1b:61:f6:6e:d7:d5:80:f8:75:d0:35:1b:83:33:aa:
f4:75:c1:5e:b8:86:95:8c:6f:bb:61:d2:82:e4:ff:16:ee:a8:
c1:87:9d:40:4b:a5:73:01:dd:b4:79:bb:14:68:10:d3:1e:44:
dc:b1:8a:99:28:51:33:f0:ac:92:b7:69:41:44:a9:00:7e:b7:
b5:04:c9:c8:64:ab:81:e9:9a:20:0e:10:b5:96:cb:66:67:09:
27:01:3d:96:8f:d8:34:5e:58:6c:16:17:d2:bb:90:28:e8:bb:
3e:31:0c:7a:ca:b3:32:88:42:4d:66:b5:1e:87:64:8f:ad:19:
bb:ae:a0:e1:6c:32:da:b2:48:62:80:8f:0e:b2:69:21:5f:df:
cc:56:c0:86:74:e9:59:7e:af:35:55:03:bd:75:83:10:8d:f0:
4f:2e:a9:7d:0f:61:6f:af:49:bc:da:47:84:02:1e:c3:1e:d8:
36:1e:ae:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:21:54 2025 by rpki-client on console.sobornost.net