Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa
File: 4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa (raw, json)
Hash identifier: kFoiqD7b/agBtXZAL+0ogQPTnZE0LZDAQjcgejR7qX8=
Subject key identifier: 39:23:DA:67:05:08:FF:A6:00:DF:B2:5F:B5:7C:B6:6F:58:AC:67:9B
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328584944692C08B4B4E2AEDF181C80
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 16509
IP address blocks: 159.112.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:2c:08:b4:b4:e2:ae:df:18:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=cc3c6444-5896-4508-81cb-305c53791f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:6a:47:30:37:3d:f3:5e:c7:d4:a1:96:ac:
a4:e6:10:b4:e4:36:0b:c1:79:24:26:7d:1c:bf:35:
f7:00:f7:81:4a:4b:02:bd:6d:d2:d5:4d:19:77:3b:
b5:d3:89:02:e3:e2:57:e1:59:e1:7a:85:80:d5:f2:
b3:3e:fe:e4:2c:1a:74:40:db:16:3e:45:f1:a8:70:
21:4d:0d:3d:20:76:78:7f:56:4f:63:ad:24:6b:c0:
dd:2e:65:83:4e:50:08:e4:09:bc:0e:a7:64:72:7e:
f8:94:10:80:92:d9:03:28:7e:eb:d0:13:c1:72:a2:
fb:34:ad:cd:ed:8b:bd:49:ba:c2:57:29:6b:cd:c4:
61:83:58:70:04:62:9b:ee:a3:76:1a:ef:c7:09:55:
53:93:99:89:7f:ea:d8:d6:fc:91:ab:6e:f8:e9:8b:
03:6a:57:6e:fc:5e:8e:92:74:f0:0e:4d:4a:2f:48:
b1:57:ce:cc:30:d5:75:20:8f:b4:7d:ee:79:17:ac:
cd:de:ff:d6:12:68:bf:27:2b:37:14:d8:b3:8b:8d:
f4:8b:4c:57:49:29:19:79:c1:1a:e8:d8:10:16:db:
17:f8:82:af:93:7b:99:7d:b5:a1:ad:00:7b:4e:ec:
2d:5f:74:1f:68:bb:11:b5:73:2d:0b:03:ba:aa:79:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:DA:67:05:08:FF:A6:00:DF:B2:5F:B5:7C:B6:6F:58:AC:67:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/4a24f8d8-a508-3379-9a8b-f4caa34d1af5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
159.112.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:94:ef:51:bc:ad:48:ac:75:1a:7c:97:ea:38:57:ab:22:fd:
2d:3d:8d:07:49:d4:de:77:5d:2d:34:e3:cb:60:c9:59:3e:ad:
e1:cf:b5:53:a8:2e:f5:3c:5b:4a:33:81:ed:05:6f:81:b9:3b:
84:bd:c1:26:5c:96:d6:12:d8:88:1e:bb:5f:ae:7a:ab:c8:c0:
08:08:1e:45:07:32:e7:3c:c6:5d:0d:54:c1:0f:f9:1b:9a:e1:
69:10:5d:44:eb:51:fa:08:e5:e7:67:30:af:49:6d:e3:7d:52:
25:cc:37:03:5a:60:04:ad:0f:b3:c8:c5:fd:2b:0d:82:a0:ad:
48:50:c8:ad:c8:fc:c1:f9:eb:b9:9b:2e:1e:f6:07:86:49:97:
fa:26:9e:8c:cf:d6:c4:66:8b:48:d5:0b:8f:f2:8e:2a:1a:87:
1a:4d:a0:80:66:26:62:b6:da:26:12:bf:8e:bc:3a:97:31:af:
a8:82:49:c5:21:c3:a7:63:2a:a0:dd:cd:77:3c:77:da:ea:62:
56:56:c7:1b:0e:fc:f9:6f:b6:a9:34:0d:21:4f:d0:8d:eb:e6:
7b:cb:17:5a:d7:45:39:a4:3d:9e:7f:90:9f:5b:40:cb:35:20:
3b:6a:f7:9b:65:93:b1:6b:f1:7b:ba:70:3a:62:ef:48:9c:a5:
b6:15:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:39 2025 by rpki-client on console.sobornost.net