Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/2908a502-0d0b-3cdd-99f9-cbfdfd7281f1.roa
File: 2908a502-0d0b-3cdd-99f9-cbfdfd7281f1.roa (raw, json)
Hash identifier: v48idmIxW/NospCg6fALfZGoZYEPhaVPXlyp1n/x76k=
Subject key identifier: DD:C9:04:1B:FE:BD:17:60:03:83:3B:EA:5C:D0:59:BA:46:F2:25:5F
Certificate issuer: /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial: 010D0C9F432858491511585384BB05982775EF80
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/2908a502-0d0b-3cdd-99f9-cbfdfd7281f1.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 54302
IP address blocks: 216.109.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:58:53:84:bb:05:98:27:75:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=3d2295f2-37ef-4edc-a902-1ddf5958a55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:df:60:4f:03:a6:55:bc:01:f8:b4:2e:9b:d9:
4a:af:9b:0b:71:89:df:db:8b:57:a2:15:25:e2:6e:
c6:9a:67:56:89:82:97:3c:71:f4:a4:01:9e:79:00:
ff:3a:2f:ee:8f:3d:03:09:82:e9:12:00:c9:66:c7:
15:4c:5a:67:a1:dc:29:c8:5c:a7:a3:5c:ab:f4:e0:
16:44:df:ef:54:39:d0:9b:f6:f3:9d:42:e6:7d:66:
a2:d5:fe:b7:a2:b8:00:40:27:89:8f:7c:21:76:cd:
5b:80:cd:17:8c:bf:47:f8:fb:2f:bd:af:50:ba:ce:
9e:31:2b:24:6a:39:c3:b0:e9:dc:26:21:8f:a6:64:
35:2d:2a:de:9c:1b:bf:5c:28:54:a7:06:63:e5:da:
c5:74:83:03:38:40:fa:c5:03:c4:ac:66:b6:1d:2a:
de:26:0b:dd:b4:c0:50:7a:9b:29:e8:42:2f:ec:ca:
cf:a6:55:99:bb:1e:b9:09:4f:32:ea:21:cd:07:5d:
26:8d:a1:7d:ed:51:7f:60:46:ca:15:ef:84:d6:ac:
c6:9f:b0:55:09:b3:2f:47:66:f6:3f:9e:02:55:9a:
96:60:0c:58:1a:83:ea:8e:79:11:16:15:79:31:d4:
48:ad:2b:b4:8a:68:7d:8e:65:91:ad:d0:6f:74:a3:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C9:04:1B:FE:BD:17:60:03:83:3B:EA:5C:D0:59:BA:46:F2:25:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/2908a502-0d0b-3cdd-99f9-cbfdfd7281f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl
X509v3 Authority Key Identifier:
keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
sbgp-ipAddrBlock: critical
IPv4:
216.109.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:a0:66:cc:30:fe:0d:ab:fe:79:dd:13:b9:63:5e:33:d4:a1:
54:24:8b:60:41:7f:97:a5:aa:11:c8:6f:bc:e4:d4:d9:33:9a:
50:50:53:58:42:5a:24:5c:95:8e:2a:08:1c:67:e4:5a:d2:c5:
b9:99:19:64:4d:4d:66:d1:57:3f:cb:78:11:d2:97:f4:1c:c1:
33:15:2e:02:be:ee:10:f7:fb:fd:89:50:b5:1a:7a:52:75:e0:
af:0d:f4:12:67:7e:f9:69:ed:d7:da:cf:0b:31:fc:d8:5d:a0:
f0:a3:3e:b4:1d:1d:bd:e2:16:60:8e:e5:82:d2:99:1c:6e:be:
c8:27:60:fa:c1:03:92:05:09:54:5a:54:e9:61:14:69:72:40:
c5:24:c5:48:45:b0:a2:ba:61:e9:a2:6a:46:05:ba:07:1d:2c:
13:9c:12:bf:16:88:2d:2a:2c:a5:1c:cd:53:95:a8:40:37:2c:
ab:3f:c7:83:1a:5e:cc:3e:2d:5a:9f:d0:43:89:51:c5:ff:6f:
50:85:1e:b3:f7:91:de:1d:6d:ca:f4:ec:56:5f:cd:4a:5f:00:
90:17:59:ad:6e:5b:59:54:3c:53:9d:ca:8d:63:0b:74:51:f2:
f8:b8:a8:36:9c:38:4b:7c:c1:3e:28:ef:f4:43:7c:78:3e:19:
a3:cd:e7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:23 2025 by rpki-client on console.sobornost.net