Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa
File: bd8c4790-3fa7-3392-86ba-87e9adece526.roa (raw, json)
Hash identifier: xc6EqAxVaFbuOu3/oOCmAD+Ke0xwVCLZ1MGjW7a7yvE=
Subject key identifier: DE:D3:D1:F6:44:35:51:F3:99:AD:F4:31:5D:CC:46:80:9F:A1:7D:63
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584937D93A0621F279BA3FAB2F40
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 199.36.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3a:06:21:f2:79:ba:3f:ab:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=71edcb29-fbc6-46b1-8e37-2805315e9d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:35:f4:88:a7:d2:31:6c:c7:8d:03:23:c7:
34:60:cc:c1:88:86:25:07:27:b9:4d:7a:75:ce:3e:
d3:e6:a1:1b:f2:5d:73:ac:9e:79:1d:46:54:2f:d1:
02:b7:77:6f:75:ac:68:08:02:6c:b7:ff:db:2e:2f:
6d:5c:1f:bf:2d:ea:15:9a:3f:78:c4:a8:67:74:b4:
b9:2a:ba:29:b3:af:c0:3d:12:de:55:e0:c0:1a:f9:
ce:38:8a:e2:6d:9f:e5:1c:4d:a9:50:65:31:96:ae:
a0:d9:05:28:3a:56:b4:36:0b:5d:5c:19:04:49:c7:
e5:05:4c:02:14:b8:9d:23:a2:c7:a9:d2:de:5f:cf:
70:c3:86:f0:61:a8:f4:74:ab:50:09:47:63:48:c6:
d2:e7:77:8f:9c:69:3b:f8:5b:40:44:46:ad:1d:a2:
8f:40:13:2b:a4:a0:53:59:59:98:8c:2f:72:4f:fc:
80:b7:ec:2a:65:4c:3d:ce:e7:44:14:46:bd:43:8e:
97:da:42:c0:76:f6:50:72:8a:0b:06:e9:11:33:b8:
47:72:c8:68:45:aa:73:ed:6a:b4:59:42:dc:67:d7:
1d:5b:90:f5:da:d3:16:95:00:9a:b1:ef:88:51:6f:
12:b8:45:49:18:ae:dc:35:3b:ed:fd:34:4c:32:a8:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D3:D1:F6:44:35:51:F3:99:AD:F4:31:5D:CC:46:80:9F:A1:7D:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
199.36.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:f7:1e:75:aa:f3:17:f3:59:d4:0b:4e:65:8b:ab:99:48:da:
7d:12:65:53:80:7a:9e:c2:68:09:99:27:64:87:17:34:18:1f:
c0:f9:74:0b:fc:a5:4c:d9:1c:ba:d5:fd:48:8e:a4:ad:09:64:
35:92:eb:d6:10:dd:9d:b3:a1:0f:e5:6d:7d:4d:b4:c0:8c:9e:
40:95:17:4d:7b:40:24:32:20:ca:08:40:ee:f6:c7:55:82:4c:
7d:69:30:55:16:bb:82:4e:00:e9:0a:d0:67:61:2b:f5:9f:53:
15:59:f0:16:4a:b2:06:e5:8a:62:83:14:e2:ce:a1:f7:a6:8a:
9d:ae:82:41:e8:83:0e:74:0a:c3:a9:13:ea:20:28:2e:78:29:
43:7f:c5:bf:5d:72:9f:af:4d:bb:c3:3a:ad:0c:f4:0a:1c:2c:
f3:c6:33:bb:56:4f:9c:be:97:d9:22:ff:01:a0:14:5b:91:a1:
ab:a4:a9:22:7a:df:b3:46:27:f4:ce:78:ee:7d:f2:a3:86:86:
47:7e:f2:fd:ee:1a:c9:56:23:89:e2:77:de:59:5c:9b:97:1f:
9d:b7:ee:6c:03:8c:8f:d8:c1:ca:1e:de:ee:c1:98:92:35:a4:
a1:bf:ae:d8:63:ff:40:e2:75:72:09:aa:19:29:09:65:17:49:
c6:00:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:19 2025 by rpki-client on console.sobornost.net