Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c8a2dd92-5ffc-35e2-8fc0-9d20ccca46a4.roa
File: c8a2dd92-5ffc-35e2-8fc0-9d20ccca46a4.roa (raw, json)
Hash identifier: PzCv5Hzaku7YyghOZeeeM+dsPvMomxsCjg32EWaz+bw=
Subject key identifier: FA:F8:FF:78:A2:67:BF:17:CD:16:98:18:54:68:35:95:06:70:2A:C1
Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial: 010D0C9F43285849393E7BC1A817FCF43F507080
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c8a2dd92-5ffc-35e2-8fc0-9d20ccca46a4.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 30722
IP address blocks: 47.53.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:7b:c1:a8:17:fc:f4:3f:50:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=797b69a1-6546-4ad1-acaf-3b977f6cccfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:35:95:3f:b5:b8:67:8e:93:1b:05:61:e4:
85:92:ae:f6:d6:11:c1:bf:c2:48:74:da:32:bb:0e:
bd:c4:11:02:2b:02:9c:38:c8:bc:29:65:49:c0:9d:
bf:9b:7e:91:b1:3e:6f:93:a8:6e:d8:4f:ff:b1:93:
1d:53:67:83:4a:46:9d:88:f0:a7:dd:91:87:61:e5:
e5:79:c7:a5:59:79:14:74:60:8a:e5:fe:b7:bc:8b:
1c:3a:21:06:61:9a:eb:d5:a2:54:a0:26:e1:fc:62:
dd:fb:02:18:28:81:a5:44:32:1a:b8:64:49:85:d6:
0b:2d:bd:8e:cb:91:cc:55:de:6b:64:d2:1d:b9:8b:
3e:df:56:71:c7:31:f6:e5:02:9e:37:db:bf:fc:d2:
a7:da:43:21:96:6a:19:1a:4f:fe:23:d0:44:45:2b:
45:91:83:fe:03:59:c0:d0:d8:48:8e:d7:4d:46:47:
a5:3d:48:69:ff:8b:83:3c:bd:eb:4b:d8:b4:1d:93:
ba:62:a8:b3:1a:43:61:18:33:10:f3:0f:64:87:d7:
8f:d6:9f:a4:cf:ad:56:02:b3:c7:37:6a:88:e7:e1:
74:52:03:e8:48:c0:5a:69:fa:d2:37:ab:dc:3f:a7:
d9:79:8d:06:0c:50:16:c8:07:b2:b8:03:95:dc:10:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:FF:78:A2:67:BF:17:CD:16:98:18:54:68:35:95:06:70:2A:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c8a2dd92-5ffc-35e2-8fc0-9d20ccca46a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
X509v3 Authority Key Identifier:
keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
sbgp-ipAddrBlock: critical
IPv4:
47.53.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:c0:27:10:a6:9f:f8:c3:24:d4:13:d8:2e:94:39:a7:39:e2:
c5:f8:94:89:eb:5a:80:75:fd:5c:1a:6f:3e:d5:c6:a3:ae:06:
aa:4e:08:1c:53:13:02:d5:94:8e:57:b8:7f:17:a8:f8:58:9b:
1d:f8:0b:b5:00:a1:51:b0:66:e8:c0:2e:16:d3:1f:57:92:e7:
42:ab:c7:7d:46:ac:8d:74:86:45:9a:3e:4f:85:9b:8e:99:fe:
c5:53:99:04:b1:83:a8:19:35:37:d9:7b:e8:08:78:76:5c:c6:
f5:00:fb:39:df:fc:04:45:59:52:3d:db:6b:d0:8d:7d:85:57:
c8:36:8c:a2:f3:c0:86:f4:9b:a8:33:b7:2d:f6:dd:30:1c:54:
f8:64:83:3e:50:1e:87:01:61:59:ee:af:88:c1:a2:60:a6:ac:
70:bd:15:db:b8:65:a2:9a:d0:b8:77:e5:4d:d8:9c:48:b6:95:
ce:8d:91:a9:89:ef:71:a2:2a:27:9f:dd:64:4e:6e:2e:49:b1:
f0:ea:a8:7b:7c:70:b4:dd:d6:f7:bb:25:d5:61:27:5d:18:5b:
46:fb:92:50:57:9c:69:43:fe:26:b3:0b:a7:b2:4d:6d:b3:5e:
87:e8:71:d5:3d:19:da:30:f9:52:bb:f0:75:5b:a2:36:6f:2d:
b9:5c:66:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net