Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa
File: 5c80a08c-e49d-33f4-b617-5ada5f2af850.roa (raw, json)
Hash identifier: zwoa5k1jwL9inVGmJ3XydztwcZryDqsY68DPqhv07Fc=
Subject key identifier: E1:1F:D0:65:6B:80:F3:42:B1:40:29:00:DB:35:24:6A:1B:01:A3:EC
Certificate issuer: /CN=e3370a8c-7e39-490d-985a-a478ce54459f
Certificate serial: 010D0C9F432858494303EE4040AAF203E7173480
Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 4393
IP address blocks: 209.251.198.0/23 maxlen: 23
209.251.200.0/21 maxlen: 21
209.251.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:ee:40:40:aa:f2:03:e7:17:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=5e8a20ed-6981-4757-aefd-99c8dae5c4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:08:14:eb:4f:3b:fe:b1:a5:d5:fe:e2:95:
35:00:2e:70:df:8e:1a:22:16:58:e9:ca:4a:01:bc:
e1:dc:26:86:f8:df:50:67:ab:28:53:eb:fc:b4:12:
f1:ee:e0:c6:fb:af:7a:69:2e:e3:54:9c:8a:f9:0e:
1f:fd:40:46:0a:6c:aa:f6:e4:20:d4:64:54:44:bb:
2e:d6:02:e1:6b:62:2f:85:4c:f2:7b:2a:b6:66:30:
96:93:d9:3f:70:1f:94:ba:a4:57:de:9f:60:fa:79:
6b:75:48:f7:95:1a:66:ad:53:c5:d8:00:99:43:8d:
b8:1a:a1:33:f3:fc:d6:36:72:39:a2:01:07:98:df:
1c:5f:11:1d:e2:57:4d:08:dc:1e:31:3a:ac:11:c2:
e1:11:61:f8:e8:4d:24:2d:4a:b0:95:60:67:b8:58:
a7:a1:19:e4:62:2f:d6:ab:ce:7e:52:07:d0:3f:01:
7b:61:4c:63:f3:40:56:22:70:c7:5c:39:b2:4a:47:
4b:6d:b2:4c:86:72:0d:57:8c:8e:90:aa:1d:b7:d1:
69:94:ea:2b:90:23:75:22:d8:be:0e:39:9d:85:ca:
0a:04:9f:cf:46:25:2f:bd:da:c8:4e:c9:bb:6b:0c:
c3:37:82:08:c6:3c:29:ec:70:d2:cc:06:de:2f:f9:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1F:D0:65:6B:80:F3:42:B1:40:29:00:DB:35:24:6A:1B:01:A3:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl
X509v3 Authority Key Identifier:
keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.251.198.0-209.251.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:f9:34:b2:53:3d:89:05:69:f5:85:ba:e2:06:38:f5:ca:a9:
15:ba:82:07:ce:d7:3c:b1:9b:78:fc:df:a3:11:3c:3e:39:30:
1b:2a:85:fe:33:75:0c:93:33:cb:49:be:28:80:09:f4:ae:65:
87:b1:fa:29:3f:a3:d5:40:d0:a6:52:89:e7:73:e8:bf:4a:12:
b3:b6:eb:1b:a4:49:94:11:84:e4:76:e6:96:f3:c5:f0:cd:7e:
73:fa:bb:0f:2b:f8:b4:11:54:ef:55:ee:3a:46:77:08:30:74:
94:fe:52:ab:b1:df:86:7b:9b:82:bb:4a:08:25:06:5c:e2:4c:
54:5f:f8:c7:c4:46:c1:11:19:4e:c9:a9:9d:16:2e:4d:e8:0c:
7c:16:64:27:8a:40:dd:97:f5:ca:86:81:f7:18:eb:f3:82:7a:
53:c0:ba:d7:26:99:43:f1:39:be:1b:3d:0e:80:0a:ec:e8:71:
eb:79:6a:b4:58:34:20:a0:67:3a:cc:37:bd:f9:76:7c:7a:2c:
1d:01:a0:89:b0:ca:0b:6b:35:7d:8f:b5:37:db:9d:7e:38:66:
4c:f0:0d:93:be:35:ec:47:c7:4f:fd:d7:40:f2:a6:d3:a4:ad:
e7:27:f7:0b:9b:a1:7f:2e:5d:f2:d1:3c:c9:55:f0:c0:80:7f:
88:f9:be:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:14 2025 by rpki-client on console.sobornost.net