Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa
File: 50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa (raw, json)
Hash identifier: tjkb24aYrMR1nyS9n8UU8rdVWPweqVT94LMRbPs+83k=
Subject key identifier: CA:A0:9F:53:5D:8D:CD:03:AD:59:54:3A:3C:E9:A3:F7:A7:53:A4:92
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F432858496FAF0A8D0238E4CD0BDB5FD0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 14618
IP address blocks: 198.154.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:0a:8d:02:38:e4:cd:0b:db:5f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=e2a13dbd-2635-4fac-ab54-6e30cb4b5965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4c:48:53:5c:36:db:ae:b3:58:3a:56:f9:40:
87:a0:77:54:9c:f6:40:1e:08:6a:e1:70:72:3d:6c:
e7:b6:77:4b:75:7f:ec:56:ba:a9:81:f5:73:b0:d8:
12:22:77:9c:ab:57:a6:e8:e8:8d:1d:d0:71:ff:03:
0c:11:23:d7:d0:07:75:68:29:da:af:dc:8f:a9:4e:
f8:41:37:5c:da:ec:bc:54:76:63:43:02:8e:f3:19:
a9:48:4a:94:92:21:60:32:49:85:f1:da:d9:95:e7:
39:1d:df:db:fa:62:f0:91:ea:35:62:ad:1c:95:09:
f7:1c:22:3b:8c:86:9b:56:ec:61:da:88:8a:3d:3a:
d9:17:f6:64:89:00:33:16:87:5c:24:7a:08:1a:0d:
3a:e5:ff:3a:db:93:f5:4f:f1:f0:e9:ab:f0:1f:fd:
f6:37:ac:3e:7b:1d:61:f9:af:b3:06:be:b3:8e:af:
7c:c7:17:d1:b6:5e:67:62:4d:5e:d0:eb:f7:77:df:
ea:4c:bf:05:35:4b:6c:00:b2:b4:69:79:10:35:14:
7f:26:d1:d9:de:47:f3:62:33:f3:a2:83:cd:b1:f1:
2d:4c:eb:b4:ca:5e:8f:47:b1:90:60:8e:7d:89:41:
d3:b6:be:d5:7e:42:32:d7:79:f8:5c:5b:f0:cd:dd:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A0:9F:53:5D:8D:CD:03:AD:59:54:3A:3C:E9:A3:F7:A7:53:A4:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/50fb5f23-a4ee-3c0c-be56-6e3a92d44503.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
198.154.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:cc:9c:16:c1:4e:0e:4f:56:e7:e1:ee:22:b1:59:3f:4c:d0:
fc:20:33:12:08:a3:e5:c6:13:b7:ca:78:9a:ba:11:a0:a6:e1:
9a:23:76:37:bf:86:72:e7:3b:6f:c8:6d:15:39:51:d0:56:57:
17:4a:5f:4f:01:98:13:eb:18:f5:73:bc:c0:3d:00:61:2d:8f:
ee:95:3d:1f:b6:11:8f:18:75:03:cb:01:e6:42:8b:94:d1:f7:
aa:ed:93:b3:9f:24:23:5d:a0:67:88:21:31:f0:45:53:4b:e4:
a9:74:1a:25:d0:82:f5:52:af:30:11:fc:9d:66:a8:fd:43:78:
cc:9d:4a:e1:b3:ae:28:79:81:29:a6:b2:d2:0c:75:ff:ff:fe:
28:01:20:5c:59:cb:f9:3b:e7:20:b8:1d:9f:78:a6:be:d7:96:
11:ed:59:e0:78:62:6b:85:7f:4c:2a:4d:38:41:3e:c3:87:46:
17:74:6c:93:ef:36:a8:96:05:9c:25:a2:99:03:56:4b:7f:a3:
c4:e3:b2:01:07:3d:22:a0:a0:87:16:b9:9d:fe:b7:d6:8a:5d:
d7:e8:87:6c:dc:e8:89:55:b2:50:46:1c:e3:b4:0d:e3:19:71:
cf:41:63:9d:fd:9d:a2:03:4e:9c:4d:01:ff:12:9f:65:6b:12:
f2:2b:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:39 2025 by rpki-client on console.sobornost.net