Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa
File: bab99bc5-d663-3ba0-b545-5274edb63cfa.roa (raw, json)
Hash identifier: FpmYJs6cU/JvkxnjnuVThe5hC5/lraKl3sSLNNBqNcE=
Subject key identifier: F7:5D:68:14:E2:E6:69:C8:8B:A5:29:B8:D3:03:58:36:A7:10:55:A2
Certificate issuer: /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Certificate serial: 010D0C9F432858497114300B9801FF845021A8C0
Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa
Signing time: Mon 07 Apr 2025 01:00:47 +0000
ROA not before: Mon 07 Apr 2025 01:00:47 +0000
ROA not after: Sun 06 Jul 2025 01:00:47 +0000
asID: 394089
IP address blocks: 161.223.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:14:30:0b:98:01:ff:84:50:21:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Validity
Not Before: Apr 7 01:00:47 2025 GMT
Not After : Jul 6 01:00:47 2025 GMT
Subject: CN=3a0db05f-aedb-4117-8075-6e43d7baec1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:b8:f9:83:0d:78:51:4f:51:99:7e:c2:bf:
7e:74:ed:96:f5:79:ac:7d:78:fa:68:75:14:37:b1:
f4:0f:70:45:5e:99:c1:a2:ad:8d:de:c7:04:aa:59:
c9:c1:51:b6:bb:4d:4f:81:f5:6b:9a:23:21:20:4d:
6b:70:cf:3b:5b:ec:d4:3a:d3:28:64:ac:3f:d4:4d:
4f:c4:b6:dc:5c:62:fa:4b:2b:30:12:8c:7e:e8:11:
3a:7a:ca:d4:a5:c0:2e:a7:00:0c:31:2f:4a:aa:c1:
b0:6f:6b:13:36:56:22:b8:2d:65:e9:c9:ee:3f:3f:
cc:d6:79:8d:70:d1:6a:53:18:1d:0d:78:89:8b:79:
15:4c:58:4b:b5:e7:1b:e1:de:b4:61:dd:ac:0e:c4:
01:f6:ab:0f:a9:0b:7c:84:c7:36:4d:32:b2:e4:d2:
bf:7b:77:3f:c9:36:df:81:cb:0c:73:92:57:b4:05:
57:ca:7a:69:e4:c6:0e:ca:c0:b8:3d:c6:fc:f7:a8:
1a:50:50:fa:b0:52:9f:93:0c:d2:20:32:8c:9b:98:
a7:2d:55:9c:eb:c0:17:d8:05:f7:2b:90:ff:c8:68:
e9:62:12:d7:fb:5f:e7:ec:d6:49:f6:f7:58:85:fc:
5b:6b:9e:b0:cf:c5:91:7f:9b:4c:40:0c:f3:cf:bd:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5D:68:14:E2:E6:69:C8:8B:A5:29:B8:D3:03:58:36:A7:10:55:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl
X509v3 Authority Key Identifier:
keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
sbgp-ipAddrBlock: critical
IPv4:
161.223.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:45:6f:8c:5d:a1:99:88:d4:2f:15:d8:1d:ae:ff:1b:4d:a2:
d4:54:91:fb:34:1d:5f:37:61:7e:5a:45:b7:9a:5f:1d:49:c5:
91:12:05:6e:95:00:2a:60:ac:bd:7c:f9:be:3f:ac:86:41:43:
12:b1:69:63:00:b7:4f:3a:95:29:a9:a9:75:14:74:b3:f6:21:
d8:6c:e9:58:0b:84:f6:e5:9b:a7:6a:b5:82:03:af:19:d4:bb:
cb:2a:5a:ee:65:86:35:6d:30:bc:db:a8:c4:d8:a6:f5:40:74:
27:04:9f:7f:43:60:74:07:39:c4:8f:1f:ae:c5:60:34:8b:7b:
67:e1:c6:1e:84:3f:80:a3:9e:c8:1a:12:65:72:9a:96:36:29:
a7:35:59:c5:6a:63:71:4e:0d:8b:f1:b5:74:0c:7c:c7:0d:34:
6f:cd:46:62:c9:15:1a:23:ea:71:aa:8e:68:1e:95:a6:c0:c3:
a8:cc:bf:6b:8a:04:a4:ad:17:2f:56:de:1e:c5:9d:c0:41:f2:
bb:43:6f:2f:0b:9c:59:04:1e:32:81:7e:84:b9:bb:8e:3e:5e:
4a:52:08:6e:aa:2a:f6:35:f4:48:b5:46:08:e2:18:d7:5a:0f:
8b:d2:ca:cd:53:85:9a:ac:03:e8:70:54:90:56:e8:f1:81:2b:
3e:1c:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:01 2025 by rpki-client on console.sobornost.net