Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
File: 2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa (raw, json)
Hash identifier: 5UTE5qS/aoYnVvqASL1Tn8Suyt9kIyJenuajNgeZt3s=
Subject key identifier: AB:D8:35:A1:FB:B2:86:D4:D2:08:7E:D0:71:E6:D6:DF:95:42:D1:EC
Certificate issuer: /CN=0c71d09c-b853-44b9-8b34-8d5283774a5a
Certificate serial: 010D0C9F432858497279B7F222C381E94C056760
Authority key identifier: 32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 14721
IP address blocks: 208.86.116.0/22 maxlen: 24
208.91.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:b7:f2:22:c3:81:e9:4c:05:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c71d09c-b853-44b9-8b34-8d5283774a5a
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=c889feff-b61e-45c6-97d3-9b0ffc069904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:78:66:2e:89:24:c7:dd:1b:a5:5a:77:79:
2d:4e:df:b9:b1:64:8d:67:7b:02:bc:17:8b:0e:01:
15:e6:e0:b7:80:6a:dd:fc:65:9a:f3:31:44:ac:81:
d9:4d:8a:d9:1e:94:b9:06:ca:6a:24:b0:dd:4f:28:
8c:3e:fe:e9:73:99:bd:35:30:85:f5:e4:ec:20:52:
64:f4:e7:61:5f:43:43:3e:f0:b1:ff:0b:bc:08:0b:
b8:85:79:85:97:7d:e3:4c:7f:05:39:34:27:1a:d2:
92:a9:2d:2b:19:75:44:8d:0d:1a:63:8a:87:a7:c3:
29:1c:f1:78:e1:06:fd:28:51:51:ed:39:00:96:7a:
57:14:45:36:9b:05:e7:5d:31:bf:8f:5a:65:fd:0c:
d2:23:d2:6b:7a:7c:d0:e8:98:89:7c:6a:9b:e4:7e:
e3:29:92:f9:a2:dc:14:2b:af:e3:11:26:52:58:8a:
fe:a8:ac:65:50:43:98:06:d9:a1:38:38:b5:11:bf:
ab:4c:45:8a:06:62:60:b1:44:ad:94:d1:c2:e5:21:
2d:2b:43:d4:77:05:cc:57:3c:3f:d6:b1:39:42:f2:
42:43:0f:f9:f7:82:5c:b0:bf:b6:27:2b:a4:40:c4:
40:4e:40:2b:64:6a:10:5e:c9:4e:5c:e3:f9:2b:eb:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D8:35:A1:FB:B2:86:D4:D2:08:7E:D0:71:E6:D6:DF:95:42:D1:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl
X509v3 Authority Key Identifier:
keyid:32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.116.0/22
208.91.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:cd:09:97:16:ce:1c:9a:e2:a9:8f:3a:c9:72:6e:1c:5b:0d:
f6:94:82:02:7b:2a:59:ff:57:46:d3:40:10:0f:ac:e2:39:61:
1a:83:a7:46:a5:ed:05:6d:98:29:4c:ab:ce:4e:be:18:f8:aa:
3b:25:e5:9f:b1:64:64:22:e1:2c:a9:22:30:c4:f3:10:ad:84:
48:37:9a:5e:15:69:cb:ef:42:a5:23:bf:8f:e6:85:35:94:df:
05:1a:09:d7:ae:42:e8:f8:e1:92:a2:2d:5c:1e:a1:e5:b9:9b:
b1:21:37:2d:b0:52:8c:44:bc:52:27:b1:53:96:86:d3:2d:ee:
c6:76:c8:0b:53:f2:f9:0e:7d:d8:d8:33:6f:d8:48:54:8c:02:
21:73:f0:3f:eb:4f:31:2a:8d:0c:0e:4d:fc:8c:9c:33:f1:4e:
67:d0:5a:cd:be:17:57:90:03:2f:6c:79:82:16:d6:f0:fd:6b:
11:a0:d2:9d:01:45:33:ff:54:ac:72:2f:90:2a:c5:82:3c:79:
a7:15:5b:c5:29:fc:4d:b7:98:e2:f7:94:a6:f6:f9:9b:ee:23:
37:37:2f:ab:74:4a:80:fb:07:85:12:72:07:7f:b3:4e:39:2a:
75:8d:71:82:a2:39:a7:ae:da:b5:ef:56:45:f4:12:8e:c2:8f:
81:d2:6d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:50 2025 by rpki-client on console.sobornost.net