Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa
File: 2b0ee5da-394f-3856-9213-54a1585985fc.roa (raw, json)
Hash identifier: Z1snvbw9PL0qnz5JeNM/PtQN2CaATVCgedfWXCkp3ak=
Subject key identifier: 5B:80:55:CD:E4:E7:9C:12:56:C3:41:5F:5E:97:B3:63:E0:F6:D0:B2
Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial: 010D0C9F432858493C091D2B8A42F41724BFEA40
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 14500
IP address blocks: 199.182.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:1d:2b:8a:42:f4:17:24:bf:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=8da17849-204b-4f21-8041-ff9454456e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:0c:89:b8:2e:e1:05:70:6b:fd:de:4b:8c:
dc:4c:e0:24:ea:7b:2c:26:da:0e:02:e2:c7:18:2f:
da:b1:00:eb:6d:03:e8:20:93:6a:bf:ad:dd:56:7b:
5b:d8:33:81:59:bd:a8:aa:13:23:63:9c:34:6e:8a:
61:89:1a:41:73:59:1a:a5:46:e3:92:1d:6d:4e:c8:
6d:32:97:d7:1f:81:34:9a:fe:67:0f:86:9b:11:98:
c5:1d:a3:ff:e5:a9:f1:00:77:1a:f6:e3:35:12:8e:
2a:e8:d4:fe:38:f3:ae:61:75:13:f6:c0:29:55:5a:
f4:77:8e:a0:33:5f:54:c6:ee:80:e3:eb:28:29:83:
8c:6e:2c:24:e3:8c:ca:c1:1a:8a:9d:d8:4f:83:55:
b0:f7:8c:07:18:ef:0d:b2:94:76:b9:b1:da:c7:85:
c6:ac:30:b9:07:5a:1d:bb:a8:bd:1b:b0:da:ec:48:
6f:49:fd:47:ce:a1:48:75:eb:1b:c5:cd:7f:0c:d9:
25:93:6c:25:47:d6:b6:d9:1d:26:ae:ce:39:06:11:
c2:00:17:f4:dd:cd:ec:37:ec:0b:16:ce:4e:55:8a:
aa:7c:29:a4:01:8c:cf:2e:bf:13:44:a2:e4:e9:99:
de:95:ed:38:df:27:14:60:4f:77:e7:35:2c:1b:ed:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:80:55:CD:E4:E7:9C:12:56:C3:41:5F:5E:97:B3:63:E0:F6:D0:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
X509v3 Authority Key Identifier:
keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
sbgp-ipAddrBlock: critical
IPv4:
199.182.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:68:ea:9a:61:2c:af:f0:09:3d:3a:d7:d8:58:dc:ad:f3:d8:
64:27:e8:a1:3a:4c:69:67:fa:b7:fe:45:f6:81:ae:53:3b:35:
2b:b7:67:bb:27:bd:1e:78:91:dd:ab:87:27:c3:bd:e3:37:63:
fc:6d:ae:ba:b9:a8:f9:85:59:14:29:69:0f:67:81:5b:ab:da:
42:49:4d:58:9e:0f:7a:d2:15:d5:a5:1b:0b:f9:54:16:f4:54:
0e:5f:e1:c1:0b:38:59:d9:38:3a:b2:d4:ff:d6:da:56:22:6b:
6e:c8:22:e9:2d:c6:91:53:b6:b0:10:55:51:ce:33:28:41:db:
c6:8c:d3:d5:aa:be:e1:41:63:ab:a5:4c:33:22:a1:4c:23:8c:
73:18:52:df:12:ae:23:83:08:67:f3:ee:c0:d4:33:1c:01:0d:
9a:75:bf:10:0d:d2:f3:24:bc:22:01:84:ad:e6:62:e5:86:f4:
c4:cd:83:fe:78:e1:48:de:71:08:b4:99:2f:4b:d2:8e:ab:40:
0c:15:0a:5c:4f:57:fa:51:34:3d:b7:f4:98:bb:a5:50:93:c5:
94:4c:37:52:e7:b1:50:f1:cd:0f:da:22:37:0d:ce:fa:7b:5b:
31:29:23:34:d4:e1:30:9c:d0:cd:ae:20:0b:56:dd:1c:cf:fb:
e0:27:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:20 2025 by rpki-client on console.sobornost.net