Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
File: 57e59a80-25de-3a88-8329-a612aabbf07a.roa (raw, json)
Hash identifier: CNxN5iAnWJaNd5wOZsXpgPCzwGiSgvUPt3Iu0otFABo=
Subject key identifier: F5:E2:10:11:C8:DF:AB:15:E6:86:E3:C1:66:06:E9:AD:48:C8:6E:66
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584981D45F280156139BCD01D7E0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 398478
IP address blocks: 107.149.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:5f:28:01:56:13:9b:cd:01:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=ff12ee67-b882-42c5-9dd0-9d264606addc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:6c:d0:a5:41:88:a3:68:b4:ba:b2:68:76:
02:f0:db:c6:f9:16:56:63:f7:06:56:14:50:9b:b0:
d1:63:74:d0:00:98:ed:3d:e7:46:65:07:1b:f6:5c:
54:14:77:5a:31:92:f2:bc:35:5c:40:8b:a2:8d:88:
7e:0c:ed:d6:47:ef:05:69:c3:42:03:e1:ad:c9:d8:
e9:b4:59:02:49:83:fa:78:aa:79:20:da:8e:03:94:
b9:90:9f:f0:15:3d:88:5c:09:7c:8e:88:4b:71:2d:
4b:60:18:54:09:b2:29:b8:ce:57:90:05:ca:a2:86:
d2:02:4a:cd:45:16:89:90:6d:8d:5b:51:67:95:cf:
8b:a5:79:60:07:f4:3a:a1:c1:d1:7c:77:9e:ef:a7:
b2:19:99:1c:15:e2:97:32:ff:f9:0c:57:45:b4:f1:
df:14:14:b5:95:ac:6a:94:94:21:38:b5:b1:3d:af:
18:4e:66:da:14:16:91:42:88:83:86:cd:8c:5d:4a:
c6:35:46:86:28:e7:17:84:29:dc:f9:ca:2f:0f:f8:
e2:97:ac:30:d4:60:3a:bd:08:60:40:38:54:cc:51:
fc:7e:f1:68:4a:36:c4:d7:7e:24:57:e2:e3:6c:00:
23:10:77:b8:be:66:c0:1b:05:f8:0a:b9:df:dd:fe:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E2:10:11:C8:DF:AB:15:E6:86:E3:C1:66:06:E9:AD:48:C8:6E:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:03:33:ec:d9:33:dd:85:55:8c:98:4b:ab:90:e7:f2:2e:d5:
fd:73:98:44:ee:0e:de:a3:b8:25:a1:01:cf:40:31:0b:2f:85:
9f:e4:f5:5f:05:04:d1:59:10:97:d8:3f:20:81:dd:12:bb:cb:
58:b3:53:82:ac:73:2d:25:ee:ca:08:4a:4b:f9:f7:eb:36:8a:
c0:17:ea:1e:d7:90:bb:12:48:7f:4d:03:29:5e:45:5f:8f:ff:
eb:ba:4c:fd:dd:85:e5:de:e7:3e:5f:a5:a8:ae:27:8f:73:7b:
db:94:5c:f8:2c:35:f4:59:ba:f7:74:4a:57:e4:95:a3:39:0c:
da:8c:61:b3:09:ac:1a:80:7b:e5:50:e7:21:6c:18:39:14:9a:
d8:7e:fc:15:a3:0d:8b:72:bd:b2:c8:41:b7:92:9b:6b:32:c1:
fd:13:b5:2a:fa:27:e5:7a:05:3d:91:a6:cf:a9:05:12:f9:ea:
4c:a8:a0:18:de:e0:b6:e5:6d:95:0e:af:a2:bb:32:3b:ba:53:
b1:be:fb:27:c7:7d:62:5c:76:c1:d9:78:95:cd:a0:e7:be:b5:
aa:b6:f8:ab:54:c8:69:6e:22:51:9a:64:de:7f:8b:63:8a:60:
d8:ec:11:46:ad:83:25:6d:b5:5b:80:19:a7:b5:c4:c1:5a:e7:
d7:94:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net