Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa
File: 469dd2df-4576-34bd-923d-489a11adb222.roa (raw, json)
Hash identifier: YYN44qZ4xjzBt3nHuhBEhgUyvvCqpZqo2tC9bV5GQDU=
Subject key identifier: 8A:67:46:2D:CF:BF:D9:F3:11:7A:76:8F:62:37:90:6A:66:0A:07:74
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F43285848F92694D96F639F95AE550300
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 1280
IP address blocks: 149.20.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:94:d9:6f:63:9f:95:ae:55:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=a6e7202e-aea0-46f9-995f-8679419bb163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:60:8a:4a:5a:bb:39:67:e0:17:65:78:84:
cf:d4:13:2c:dc:42:5b:e4:fe:21:3a:59:70:93:00:
3c:e7:79:63:d3:17:9c:58:e3:2d:16:c2:70:c3:dd:
16:16:75:e6:2b:12:52:82:e8:c5:de:8d:80:bb:4b:
8e:41:ce:d5:d6:8f:dc:f7:33:98:2a:d2:d7:7f:d3:
0b:d7:10:20:7d:34:36:03:a3:88:48:cb:8a:89:29:
ad:4f:cc:b1:00:7b:4d:06:e3:70:ca:e9:67:c7:7f:
62:bb:23:ff:07:fb:20:c8:2e:95:ba:02:61:3e:34:
18:99:e3:07:df:ef:9e:62:5b:78:3b:56:30:17:c1:
c3:b8:0b:c1:86:b3:f7:3e:14:83:05:84:c9:0a:e3:
33:b2:d3:e5:43:6b:4a:ea:84:b6:c2:e3:4e:c4:04:
0a:96:57:e6:55:cc:c1:e1:a1:79:bd:d9:5c:a6:cf:
7b:fb:96:70:ae:b3:12:38:52:11:ee:40:0e:04:a6:
d9:58:c9:b8:3e:f9:a5:30:2a:8a:ce:73:9e:4e:27:
29:6e:05:ec:ee:5e:30:69:92:04:26:f6:b0:5c:c8:
7b:01:d0:7a:47:5a:04:d9:41:93:77:24:c1:5d:4e:
ea:c8:1b:22:5e:94:9d:c1:3c:01:cf:47:2e:a9:b8:
a0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:67:46:2D:CF:BF:D9:F3:11:7A:76:8F:62:37:90:6A:66:0A:07:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:f0:b9:39:cc:fc:50:ff:84:45:b9:6d:8a:6b:d0:7d:45:8e:
cb:59:f2:f2:bf:17:f7:da:54:93:04:30:1b:fa:2a:21:54:77:
f0:2c:fc:02:7d:36:c3:8a:a1:cc:c6:d3:05:bc:05:78:57:dc:
a1:4f:97:84:74:99:0a:cb:61:12:b5:54:29:5d:85:85:73:94:
04:be:41:dd:53:e7:cb:24:50:80:5f:65:c5:84:af:60:50:73:
84:82:c3:2b:14:42:14:0b:00:d6:a1:f4:ef:78:40:fb:cb:ab:
d5:24:e8:da:61:71:d9:7f:bb:2c:65:31:4e:b0:bf:91:e7:de:
82:3a:62:b7:24:6c:0d:e4:09:6c:c1:26:48:c0:b5:37:cf:77:
9c:e3:f2:7b:2c:5a:b8:f4:4f:a5:a3:4b:e6:59:76:8b:85:67:
4b:fb:7b:cd:d1:43:2d:3f:46:a0:8a:e6:16:24:a7:4c:26:f4:
c3:d4:5e:52:52:76:fc:28:9c:c3:5e:6e:c9:c5:99:a6:03:8e:
b1:4a:73:bb:c8:b7:1c:65:17:bc:cb:e9:d8:27:80:9b:7c:99:
1e:21:e0:68:5d:8c:00:80:06:5e:01:d7:e4:78:83:8a:36:a4:
3b:cb:98:20:50:2e:d2:79:c0:a0:43:ba:a3:e5:22:36:54:5e:
bf:48:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:48 2025 by rpki-client on console.sobornost.net