Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa
File: 0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa (raw, json)
Hash identifier: QYNGudo6jaDP8S/RabJniY9r3MepI8P5WEIe1mEqO4E=
Subject key identifier: D8:33:CE:8A:E4:EB:6C:FC:1A:66:1B:85:AE:A6:7D:0E:0B:89:B0:8C
Certificate issuer: /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial: 010D0C9F432858490881705C2291A22531F5D580
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 11659
IP address blocks: 169.147.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:70:5c:22:91:a2:25:31:f5:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=c909a35d-b064-412a-9547-91795f945e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:1b:6d:c4:c8:3a:e6:c3:4f:88:9a:69:de:
c3:38:01:52:cf:09:e8:f1:f7:7e:3a:fb:fc:12:25:
77:e9:18:e0:4d:52:55:07:f0:c5:7e:df:d1:e9:2e:
cd:57:e4:5e:46:fb:cc:68:70:83:cd:1a:d1:92:11:
32:97:77:6a:fc:78:c1:6b:b8:5c:5d:3b:b9:cf:f2:
53:c0:25:f5:5e:80:f6:25:36:29:a0:9f:8f:ab:e7:
66:df:ad:a1:b0:f0:44:5c:57:2e:65:e5:9c:bd:41:
d2:94:00:b8:8e:dd:33:9a:2f:96:4f:eb:58:b1:bb:
4f:c6:03:bb:28:c6:8d:66:d3:c2:b4:eb:8e:34:9b:
c4:ba:39:3f:ac:20:f6:e1:fc:18:27:f5:60:1f:ba:
e0:72:89:46:7a:04:8e:62:c5:cd:4d:ad:9c:19:4e:
36:a7:00:70:ae:1f:c2:5c:ca:9e:e3:fc:20:bf:52:
c0:28:06:3b:f8:ea:40:19:ac:74:af:99:b3:da:5c:
c2:e6:4f:55:94:39:ab:4e:d4:69:c2:27:dd:da:82:
24:b1:73:44:c6:d7:c7:33:3a:ca:77:21:70:c8:b6:
89:1f:99:ff:c6:97:09:3f:a5:8f:f5:f2:df:d5:96:
3d:69:8a:0a:92:9a:f7:52:2d:82:43:67:1d:98:bf:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:33:CE:8A:E4:EB:6C:FC:1A:66:1B:85:AE:A6:7D:0E:0B:89:B0:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
X509v3 Authority Key Identifier:
keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
sbgp-ipAddrBlock: critical
IPv4:
169.147.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:91:e6:58:e9:42:52:b8:0f:bc:b4:cf:bb:36:b3:b1:ed:52:
0e:b6:ec:24:4a:b9:88:a4:15:35:ac:f2:62:1a:34:11:55:c4:
47:51:62:f9:f2:52:dd:db:3f:2c:66:2c:3f:d9:81:73:62:2c:
76:e7:44:55:75:ab:1a:25:19:3e:45:de:1c:34:35:1d:cb:58:
6e:6f:67:81:70:4f:1c:0b:54:99:a2:31:48:30:b3:d6:1b:eb:
cf:26:34:65:96:57:51:63:75:c1:b2:eb:fa:87:aa:c4:f5:c1:
fc:e8:a3:a5:e8:21:b4:d9:0e:ae:14:55:9f:ed:21:28:a7:99:
b5:05:b4:48:8b:55:59:95:c8:a7:ba:ef:6b:00:77:6e:5a:1e:
a3:5a:ed:88:34:46:72:ad:1e:7b:02:de:26:ae:1c:4d:0a:20:
ff:d5:d8:47:e5:ef:65:2a:d4:4f:5e:5d:92:d2:b9:61:0a:c3:
d6:ea:eb:ce:2f:58:bb:36:e8:22:59:8b:be:b5:de:d3:14:f3:
6c:71:31:52:3d:e5:52:eb:4c:ba:bf:c7:8d:aa:d7:f1:d4:46:
f5:fe:ac:a9:a7:b1:0c:a0:56:32:ed:4c:8c:83:8d:64:8f:4a:
31:45:e0:fa:56:39:39:a1:eb:09:c6:e2:53:3a:ca:d9:b1:cf:
ec:eb:66:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:23 2025 by rpki-client on console.sobornost.net