Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa
File: b10e56b6-546d-3be0-b675-d61e616393d8.roa (raw, json)
Hash identifier: Hd+sFLzEzbE/9eONXPNgXAd6FibQXVNW5z1Bssq/uag=
Subject key identifier: FB:3D:5D:54:65:86:0F:DC:5D:1E:B0:CD:60:E3:82:5B:47:38:8F:33
Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial: 010D0C9F432858491D71813091B21EF4E63A1280
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 11052
IP address blocks: 199.249.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:81:30:91:b2:1e:f4:e6:3a:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=c6e0cb7e-6611-418e-9329-29fd43291dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:99:dd:7e:e7:41:4d:fa:08:3a:b1:27:da:
3f:eb:23:f8:60:bd:e0:74:6e:44:75:22:36:f7:66:
e5:7a:58:af:bb:c8:6a:12:3a:2d:17:fb:e5:2c:16:
36:5c:c7:1d:eb:1e:61:fb:fe:b4:e2:b5:86:b2:05:
94:7a:ea:b9:e8:19:63:1f:6f:99:88:df:af:60:c9:
aa:c7:a8:ce:2a:07:09:50:2c:2a:c2:fe:0a:00:3c:
eb:79:42:03:18:c1:5c:ff:37:9b:fb:aa:49:b7:6d:
19:54:3a:02:32:cc:a0:f0:c1:3a:86:65:e0:7e:ea:
2e:45:ae:24:4b:8b:51:d9:9f:2d:7c:2c:4c:bb:f7:
b6:e5:5b:2d:2d:f2:a9:27:91:66:7f:49:63:c6:56:
0c:8e:7d:20:fe:48:d0:65:07:0e:29:b4:d9:4e:5d:
ce:f0:42:fe:60:24:74:19:86:5c:8b:bc:6f:37:33:
a6:a0:6a:65:c4:01:30:47:d8:6b:01:b9:55:1d:bf:
8d:c9:e0:ad:ef:73:15:2f:95:53:d5:8b:98:b4:2b:
bc:c2:29:ee:6d:46:c0:fb:23:0f:50:7f:15:f5:63:
39:ce:65:00:e0:97:48:48:56:0d:41:70:90:3b:02:
3c:57:6e:74:3a:a2:0c:8e:ec:ba:37:e2:96:8f:80:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3D:5D:54:65:86:0F:DC:5D:1E:B0:CD:60:E3:82:5B:47:38:8F:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
X509v3 Authority Key Identifier:
keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:a8:7f:f6:32:c3:2f:5a:41:f9:e6:eb:fb:2b:04:75:77:0b:
ca:1d:00:37:5e:b5:25:94:37:f3:e5:f3:d3:c1:27:c8:c6:a0:
8c:66:0c:45:76:06:ac:b4:aa:b1:09:88:37:ca:7c:f1:35:57:
b3:40:ca:40:7d:e7:63:29:c4:63:b0:89:bb:32:74:08:f2:87:
d7:8f:36:64:5e:09:2b:06:08:f5:90:cc:82:b5:9a:00:b0:17:
50:36:e2:93:1f:8b:01:60:b8:20:42:5f:a6:51:f7:75:77:33:
a2:30:1d:67:f8:57:5d:55:f8:a1:f8:e1:a6:f6:2a:02:69:85:
da:6a:10:73:9d:1c:8d:26:12:47:b8:93:6b:b9:f0:8a:c4:e8:
cd:6b:d4:e9:83:ae:15:78:e7:ba:da:67:1a:c8:b7:1e:c4:ee:
e0:e1:2d:a1:ba:16:cf:48:91:3a:01:0a:d9:b7:e6:0d:ba:ec:
f9:13:75:0a:c7:87:7f:0e:b6:d3:d7:2a:ae:52:b3:03:6a:7f:
61:f0:5b:45:39:90:33:06:d8:a4:f3:76:a6:83:c7:8d:9a:a0:
6e:74:5d:c6:c6:f2:8b:ae:51:b0:4f:eb:b3:39:60:ef:10:a6:
23:17:5a:3b:b2:34:60:e3:10:27:cd:16:b5:af:ab:76:7e:f4:
ea:30:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:22 2025 by rpki-client on console.sobornost.net