Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/18447f46-ae19-3da6-8932-a57b8e80e0a6.roa
File: 18447f46-ae19-3da6-8932-a57b8e80e0a6.roa (raw, json)
Hash identifier: dNLx2K1rX8HbPGqfolJK67bsccC+Fm1yDaW3nKzJSPE=
Subject key identifier: 0C:5A:68:DE:53:6F:D0:91:7E:6B:01:BE:40:F3:C6:7F:9A:DE:B5:0E
Certificate issuer: /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial: 010D0C9F432858494CC939CDA1DCF377A76A8180
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/18447f46-ae19-3da6-8932-a57b8e80e0a6.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 14956
IP address blocks: 144.172.90.0/23 maxlen: 24
144.172.92.0/22 maxlen: 24
144.172.96.0/23 maxlen: 24
144.172.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:39:cd:a1:dc:f3:77:a7:6a:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=7a54e4b0-bdd8-4d2a-9669-1d52f8b7d11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:43:6b:ac:3b:de:0e:bd:e9:8f:5a:3a:14:
cc:43:d6:b2:59:c0:ab:eb:95:c0:fa:67:ed:52:14:
9a:4f:95:62:b8:f7:fc:09:ea:67:52:1d:ae:3d:19:
dc:e1:1f:a8:15:04:80:94:f6:18:bd:00:1b:72:f2:
53:17:ba:f3:e9:09:cd:72:6e:8e:97:7c:20:b5:d1:
23:d9:72:61:6e:bb:d1:24:e7:79:01:f3:e4:6c:2d:
a6:d9:38:75:aa:b2:4d:d3:7f:d0:d0:e2:83:7b:79:
c2:4f:c8:84:5b:fd:2f:17:13:01:09:12:ec:07:6c:
8e:8c:e4:7d:8c:35:19:5f:c3:d4:7e:d8:4b:42:ac:
df:3c:96:08:75:df:48:f7:8d:d2:af:71:64:22:87:
f8:be:82:7d:96:27:1d:14:3a:df:29:37:c3:8c:52:
73:9e:be:4e:90:72:94:bc:33:02:42:ef:b2:df:83:
ad:94:c5:c7:20:bf:ef:b8:6d:e2:0a:74:1a:46:ed:
c4:15:97:e4:e0:57:aa:b7:18:ec:b8:e0:f7:c4:2f:
ba:f3:96:e6:1a:7e:bf:48:4d:9d:0d:8a:be:84:71:
ea:d5:a8:2a:47:59:f4:f2:89:df:76:fa:8c:6c:d0:
63:e2:d7:06:50:ce:2c:c5:61:26:c4:a1:e2:4b:94:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:68:DE:53:6F:D0:91:7E:6B:01:BE:40:F3:C6:7F:9A:DE:B5:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/18447f46-ae19-3da6-8932-a57b8e80e0a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
X509v3 Authority Key Identifier:
keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
sbgp-ipAddrBlock: critical
IPv4:
144.172.90.0-144.172.98.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:05:d5:25:cb:67:02:f7:9f:00:e7:f9:ff:11:76:22:c9:c4:
85:f1:90:89:9b:70:b0:fd:07:5a:ca:d8:34:87:f9:94:ce:88:
90:16:4d:28:8b:41:56:d8:5a:35:07:e7:d6:70:57:da:1d:dd:
e4:68:6a:33:5f:a6:90:55:9b:9b:f5:49:6c:da:30:cc:14:54:
62:db:b2:10:f0:ec:ae:fa:fa:f3:27:c0:c9:a6:c3:7b:10:00:
17:4b:34:9c:3b:19:9f:dd:f9:4e:73:b5:c8:60:39:5d:04:61:
30:93:7f:51:21:ee:a5:de:09:87:69:c7:3e:8d:aa:dd:b3:8d:
63:97:d3:85:a8:56:b1:fc:0c:f3:26:8a:67:6e:42:f2:78:9a:
48:ed:d4:99:45:43:25:36:0a:ea:f7:52:5a:a4:cd:fd:a9:57:
97:97:f4:87:77:e4:17:f6:26:3e:ae:28:7e:63:97:f1:fb:30:
21:16:bc:30:01:23:b4:97:e9:18:a4:c9:35:d1:d5:8a:07:fd:
44:55:ae:9d:b8:45:d2:fe:a7:f6:ea:d1:99:48:c7:19:eb:af:
d0:76:52:75:c8:f0:b7:97:66:cf:69:a7:7d:28:cf:2f:1e:e7:
b2:e0:ff:88:ed:6c:7d:61:45:9f:6e:cc:5e:e1:4c:90:63:51:
ca:14:72:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:11 2025 by rpki-client on console.sobornost.net