Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa
File: 5b2340ea-6054-31e3-b42d-7f23e40eb030.roa (raw, json)
Hash identifier: m0ewFDli+UHN8+NcNp/PoIQmvNr5JB2hqF9GprAf8rg=
Subject key identifier: 3B:EA:82:B4:D3:D2:51:56:3A:9B:F8:70:FA:5A:AA:D5:B4:92:ED:AE
Certificate issuer: /CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f
Certificate serial: 010D0C9F432858497544512774297BD7B020E980
Authority key identifier: 68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 399603
IP address blocks: 64.112.14.0/24 maxlen: 32
2602:fc9c::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:51:27:74:29:7b:d7:b0:20:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=ca31f84d-3fc4-4749-a27a-66d8b4d85a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:2c:84:5b:01:38:e2:bd:d6:26:38:ad:31:
12:f7:74:88:0e:07:8b:cd:f8:da:63:2e:5c:aa:90:
e4:2c:c9:ea:93:23:b0:23:a0:65:5f:7c:34:7d:df:
e5:05:cd:d7:07:ad:02:8a:2e:5a:ad:42:59:0b:14:
2b:ce:d1:16:24:40:df:82:4f:db:e0:4c:6c:a4:06:
cc:81:63:6a:d8:d1:0f:8a:35:36:45:49:df:db:78:
7a:92:5c:40:44:e4:7a:d7:1c:f5:37:b9:97:c4:58:
e1:e6:9e:79:8e:44:41:a8:f7:84:69:03:5d:5c:6f:
93:69:8b:ef:82:c7:9b:30:59:62:a6:a5:38:25:28:
0a:2f:ce:bf:e9:b0:1f:57:b5:4c:74:9e:de:f5:46:
7f:82:20:9e:95:9a:2c:65:29:1e:2e:3d:2d:85:a7:
8b:bc:eb:2f:76:26:c5:f9:5b:b0:06:88:93:86:05:
59:f4:87:28:cb:60:12:75:43:59:a8:6c:ca:23:47:
a9:95:84:6e:4e:ca:6d:74:30:e5:25:58:18:0a:93:
69:a4:8e:dc:f9:b6:1c:44:cd:50:e2:8f:17:f8:a2:
7c:44:91:83:13:0d:f6:b7:81:ac:63:59:6a:90:31:
31:26:26:13:32:9d:6e:f4:d8:ab:95:9b:6b:f2:d7:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EA:82:B4:D3:D2:51:56:3A:9B:F8:70:FA:5A:AA:D5:B4:92:ED:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl
X509v3 Authority Key Identifier:
keyid:68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.14.0/24
IPv6:
2602:fc9c::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:24:50:b4:51:8d:f1:73:5c:85:16:e2:b1:1c:8a:b8:06:69:
b1:00:11:5a:2f:ec:fe:da:14:6f:bc:cc:6f:1a:5b:19:0e:16:
6c:04:e3:4e:7b:5b:6e:1b:29:b9:a4:15:26:70:35:5f:02:32:
18:e9:a0:11:29:22:ae:fe:a8:4c:58:a5:84:37:8f:a5:88:2a:
7d:dd:66:05:60:f4:5d:9c:a3:a0:18:57:b3:3f:a4:e0:4f:b7:
2a:46:df:d7:83:83:7b:22:86:63:e2:0c:19:c1:33:49:c7:fc:
ff:3b:9b:62:05:e1:d3:9e:ed:78:62:3f:09:0c:88:91:31:dd:
09:c1:fe:0c:b0:44:97:ee:ba:0b:a0:8b:2b:1f:c7:b5:86:c9:
b3:de:33:26:f6:72:a6:d2:bb:7a:5d:94:ed:d2:84:8b:a6:07:
62:d4:fe:5c:75:ec:96:48:2f:6b:d2:3e:0d:73:53:86:78:cc:
c9:b0:0f:57:55:94:69:b1:f5:5c:09:e2:a1:70:4a:05:18:13:
a6:26:e4:51:50:9a:be:e9:2e:c6:48:39:92:24:9b:e6:58:4b:
8a:18:ae:4f:a1:c0:fd:64:4f:1f:42:70:6f:bb:4f:01:75:e8:
61:33:2a:f8:b4:e6:db:e6:ec:17:d9:26:9a:07:54:5d:93:94:
e1:9e:38:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:11 2025 by rpki-client on console.sobornost.net