Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa
File: a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa (raw, json)
Hash identifier: 3j0BWqO5bY6N6bByVWphJty5pUx8DFAKfWPGeBx5+ak=
Subject key identifier: 4E:F2:9C:BF:9A:D9:67:48:9B:59:2C:3B:0E:7A:40:6B:01:B3:AC:2F
Certificate issuer: /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
Certificate serial: 010D0C9F43285849806F1ED1C180040E0B6CDF30
Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa
Signing time: Sat 12 Apr 2025 13:01:01 +0000
ROA not before: Sat 12 Apr 2025 13:01:01 +0000
ROA not after: Fri 11 Jul 2025 13:01:01 +0000
asID: 16509
IP address blocks: 198.204.9.0/24 maxlen: 24
198.204.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:80:6f:1e:d1:c1:80:04:0e:0b:6c:df:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
Validity
Not Before: Apr 12 13:01:01 2025 GMT
Not After : Jul 11 13:01:01 2025 GMT
Subject: CN=6efebbf5-3cc2-41d8-8869-f9407a0459ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:48:1c:bf:16:0b:54:92:ad:4c:20:6a:b6:
cc:05:b0:65:6e:66:bf:ce:a0:b2:c8:30:0d:c6:da:
80:33:fd:8f:f8:99:41:dd:2e:75:69:a8:ef:77:96:
41:02:e1:d1:61:fc:38:d3:db:7a:00:f6:ee:03:4a:
19:ed:e1:f5:8e:ae:21:96:c7:c9:64:7e:e1:e6:11:
4c:65:68:8c:50:f1:3e:84:52:a9:24:e3:1e:2b:63:
0f:26:18:74:f3:b7:b0:55:87:10:83:cc:ca:a8:71:
1b:01:87:16:d5:77:39:44:7e:b0:44:24:b8:8b:e4:
53:e9:2d:c3:96:89:db:0d:9a:34:aa:b4:cf:3a:9f:
42:a0:3b:54:9b:db:ff:c3:d3:f8:8f:fd:b9:7e:a0:
5f:42:3d:85:0b:b9:3c:4d:ea:49:7c:52:2e:59:8a:
e7:67:11:9e:7f:a2:37:ae:64:ce:f9:2b:60:13:56:
14:12:41:78:09:49:6d:09:1f:63:08:a2:b0:86:17:
6b:7c:63:8b:fa:f4:62:dd:c8:20:ec:fc:44:2d:ba:
1f:de:1f:2e:c8:83:93:56:42:b4:84:94:39:ef:fd:
6b:93:8e:63:cc:26:01:18:63:70:24:6f:77:47:07:
e9:18:76:d8:79:de:1b:6d:29:78:15:83:c4:88:8a:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F2:9C:BF:9A:D9:67:48:9B:59:2C:3B:0E:7A:40:6B:01:B3:AC:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl
X509v3 Authority Key Identifier:
keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
sbgp-ipAddrBlock: critical
IPv4:
198.204.9.0/24
198.204.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:f4:02:f2:a2:3f:53:02:71:77:f3:7c:f4:4b:b5:ff:c1:bc:
7e:1d:27:50:34:35:e2:dc:17:10:c3:25:34:8b:74:71:3d:70:
21:8b:d1:6e:f4:ab:2b:a8:0a:7e:ff:ac:fd:1c:04:3f:c7:b4:
65:4c:0f:ad:f3:35:c5:97:3c:3a:06:58:ea:cf:35:0d:d6:9f:
b2:c9:16:6d:2d:bb:02:10:23:bf:5e:ba:fd:ad:3b:c6:bc:c5:
ad:dc:2d:e2:ca:9a:00:4e:33:4e:fa:dc:53:98:9c:e9:ff:38:
db:e2:a0:1c:ee:e8:c8:0c:33:88:4e:43:5d:59:df:53:60:4b:
28:22:4b:b1:9e:e8:52:01:3f:05:d5:a3:cc:22:bc:78:f5:bd:
16:4f:93:d6:06:9e:77:d4:5c:9a:bf:e6:20:37:6d:44:dc:9f:
7d:be:c5:92:01:82:c7:f3:47:e6:c4:47:59:72:1c:51:27:ef:
68:a3:ff:e9:4d:cf:d9:47:56:ee:e7:98:48:29:5a:46:7f:ed:
0a:5e:6f:06:15:5f:59:ec:c4:22:35:70:3d:c1:1b:ee:2f:08:
c7:7c:9e:ab:58:1b:90:6a:93:72:6e:5e:d4:f3:72:0d:14:01:
1c:78:82:0d:ca:c8:69:20:b2:25:10:9b:41:61:47:25:dc:3f:
5b:40:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:01 2025 by rpki-client on console.sobornost.net