Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c2d4d69-cd11-34b2-aa7e-df93d2449a8a.roa
File: 8c2d4d69-cd11-34b2-aa7e-df93d2449a8a.roa (raw, json)
Hash identifier: Jm0iJubaAFCtqdDI/dnP+gtWx2RqOtHzh9evDevZ26E=
Subject key identifier: 14:51:E0:D9:2D:8C:20:B0:20:24:CE:43:71:5E:B8:C9:EE:09:81:D0
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F43285849192D203E6779AD467EFFD600
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c2d4d69-cd11-34b2-aa7e-df93d2449a8a.roa
Signing time: Thu 06 Mar 2025 13:19:57 +0000
ROA not before: Thu 06 Mar 2025 13:19:57 +0000
ROA not after: Wed 04 Jun 2025 12:19:57 +0000
asID: 207266
IP address blocks: 161.232.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:2d:20:3e:67:79:ad:46:7e:ff:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 6 13:19:57 2025 GMT
Not After : Jun 4 12:19:57 2025 GMT
Subject: CN=2e31f1d3-697b-4184-b67e-cab4567a7f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:a4:15:cd:25:36:ee:a8:17:a1:df:ef:72:
3e:20:9e:63:d6:0f:ef:da:87:a8:a2:65:08:ea:76:
04:fa:a4:4e:6d:5d:39:48:59:a5:a7:26:49:ae:26:
e1:d6:d4:a4:56:a6:0c:62:bf:3b:79:78:93:dc:c0:
bb:2e:25:e9:a6:dc:c6:c6:1b:bc:21:dd:2f:42:d9:
23:0d:b0:bf:42:b5:e3:5e:a8:ac:40:08:95:c5:df:
33:4d:65:30:bb:3a:68:66:5e:3b:e4:ca:e8:43:9b:
cd:a7:0f:34:d0:44:86:9c:51:50:c3:84:43:f2:5e:
53:56:cf:45:83:df:f6:0c:91:84:68:b0:47:21:d9:
f3:87:fb:a2:c1:14:24:b2:72:fa:d5:c1:78:ef:32:
32:b3:58:2c:bc:a0:65:de:bf:f7:e1:7b:6d:1d:90:
e3:e4:65:e3:0c:4a:bc:f1:99:90:53:95:93:45:d4:
31:a9:57:28:3c:d7:83:95:c7:0d:2d:7d:a7:33:fc:
b8:77:40:dc:86:68:24:9e:dd:d7:a0:09:96:33:a3:
ba:a6:02:70:be:92:2a:98:f9:93:e4:15:e4:e0:e8:
a4:0e:90:2c:81:89:88:5d:ec:8a:0c:bc:e0:5f:fb:
33:63:2a:c1:2d:d3:0f:b1:c2:b5:4e:3a:23:24:cc:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:51:E0:D9:2D:8C:20:B0:20:24:CE:43:71:5E:B8:C9:EE:09:81:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8c2d4d69-cd11-34b2-aa7e-df93d2449a8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv4:
161.232.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:2f:7e:e2:91:47:50:3a:3b:b7:5e:78:2e:99:9a:bf:a0:90:
92:40:f5:85:53:bd:32:d4:79:f5:63:19:99:99:de:82:32:77:
f1:84:83:5d:09:c8:fb:28:65:4c:8f:dd:0b:75:1b:15:c4:29:
fb:89:b0:44:cc:cf:c9:4f:9c:47:15:97:ef:05:b7:a8:3e:db:
66:e7:67:29:35:65:de:ba:2d:b7:a5:6a:df:f1:97:ee:fa:5f:
d0:3f:d9:3b:de:8f:29:1a:d2:62:8d:70:de:76:89:81:1c:ff:
28:69:5f:ca:0f:7b:d7:84:32:dd:90:2b:66:d1:e1:49:c7:68:
30:e3:8b:ee:a9:69:42:42:38:8b:96:fc:31:4d:30:c2:4b:a8:
f4:46:15:d8:d3:66:40:54:cb:58:3e:63:6e:33:db:41:9f:e3:
72:e1:9f:dc:d1:45:a8:0f:6e:56:8d:93:9b:34:e2:1f:eb:1e:
7b:a4:27:f8:b5:3a:ea:f3:b5:b7:8f:4e:6b:05:1d:bc:7a:2d:
6f:aa:0f:c0:62:10:31:73:da:77:2b:8b:e3:86:a4:b1:80:7d:
b5:7d:dc:4b:45:a8:71:48:7c:44:c4:2b:9a:fe:db:9d:1f:dc:
ac:1c:54:8e:71:ee:bd:c1:ea:8e:17:df:38:52:2e:68:47:fc:
e3:d9:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:04 2025 by rpki-client on console.sobornost.net