Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa
File: 1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa (raw, json)
Hash identifier: ARcmO+yMtmwYGEQXyT2uFywNkylJXkIEx3Knp0G4uAU=
Subject key identifier: D8:0D:92:7C:5D:51:8D:B1:6D:47:05:AE:DA:C8:99:9B:7A:C6:20:A3
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F43285848F926A6620C7DC94725666A00
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 208.70.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a6:62:0c:7d:c9:47:25:66:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=e87ca2a1-1de4-4090-b6a6-a58fbb90e39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f6:ba:0d:6c:dc:4d:db:65:69:5a:2c:76:c1:
bb:57:30:e9:17:67:3d:e2:b2:bb:1b:f7:be:6a:21:
04:5f:6e:25:b3:d3:5d:56:bd:7a:30:98:8c:79:f4:
07:62:c3:bf:a4:31:fc:97:e8:82:5c:9c:58:6e:f5:
26:82:90:95:56:92:35:4d:6e:57:e9:49:0f:6b:2f:
f7:a4:a1:1a:94:df:4a:61:91:08:44:ef:dd:cf:48:
4f:a2:a2:3f:28:5d:6e:f9:9f:df:d1:9e:51:03:f9:
65:1b:31:5e:af:df:20:8e:73:99:dd:eb:b8:59:92:
b8:73:40:92:8c:d0:52:4a:be:ff:6c:d9:90:6b:33:
66:1f:e7:20:a7:64:5b:ac:69:03:34:6f:fb:c7:7f:
ce:0b:ff:8c:78:d6:c5:aa:17:b0:62:c1:c6:cb:b8:
47:51:d0:ba:20:73:f9:3b:75:3c:75:99:53:24:23:
53:f2:9e:2e:c5:68:c3:fb:01:34:d5:1b:43:0d:f6:
5a:03:2d:24:4f:d3:2c:92:22:9a:12:b2:e1:16:cd:
8b:95:76:ba:4b:6b:78:03:14:13:5c:29:4f:98:7e:
8d:ac:11:20:4b:da:fb:4c:0e:2e:65:6c:36:32:7c:
e5:a8:b3:7e:bb:a4:fb:6c:20:7e:bd:cc:bf:4c:82:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0D:92:7C:5D:51:8D:B1:6D:47:05:AE:DA:C8:99:9B:7A:C6:20:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:80:0d:14:17:69:b1:6f:cb:3a:bb:84:12:f5:d2:a7:26:c6:
2f:45:03:60:96:d3:63:42:e2:23:d6:4c:3c:b1:9b:42:e8:ea:
f0:00:d6:72:6a:3b:16:6e:fd:2e:a3:f9:c9:d6:ed:83:52:8c:
d7:c5:c6:8f:28:69:a9:63:0a:04:b3:2e:0d:4a:b0:2d:79:e7:
cd:3e:13:04:87:73:b7:f2:60:6b:8b:51:6b:95:87:9c:de:30:
76:59:96:9e:15:0c:13:52:0c:59:9d:92:5c:74:d0:b5:de:63:
ef:e7:21:ee:c5:5a:19:42:a1:7c:71:b5:bb:17:af:7a:9f:3c:
9b:7a:a1:9a:83:1f:52:18:ee:ea:c3:6d:f0:d5:cb:19:f8:15:
d2:6e:da:57:84:ed:c5:8d:6b:5e:91:c8:85:d0:65:30:6b:f4:
32:75:e7:5d:c9:7a:01:59:d9:ef:3d:81:b1:7c:ba:cd:e5:87:
65:4a:e8:3a:1d:24:af:ee:ce:f9:71:4e:26:48:fa:9e:cc:4f:
dc:ce:5e:df:69:fd:fa:60:2b:68:4d:59:7f:94:f9:55:ed:9f:
36:dd:62:80:a0:33:c1:7c:87:3c:19:71:28:e1:82:ed:da:94:
70:9c:e7:16:ac:3c:73:1a:2b:fe:62:eb:32:45:90:df:b9:82:
c8:bc:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:39 2025 by rpki-client on console.sobornost.net