Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa
File: 82a59d09-a68a-3b74-821f-acd3c06dab3a.roa (raw, json)
Hash identifier: n1r8f5EKVCcLbCLgxTxojSMl5fpaj2nHIE3HAuTf21I=
Subject key identifier: 01:50:0A:D0:B7:81:45:4D:65:D0:63:F8:47:D6:BF:40:05:25:FD:3F
Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd
Certificate serial: 010D0C9F432858496FAF0D529D1ED454599816CC
Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 8075
IP address blocks: 138.128.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:0d:52:9d:1e:d4:54:59:98:16:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=dd26d7ad-673f-4e3b-b01a-fee220e067e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:4f:59:f3:16:e4:4b:12:8d:53:31:03:12:
26:3b:f1:ab:38:fc:5c:a9:dd:af:d7:3a:02:79:c4:
d9:bf:f0:a0:27:de:d6:3f:48:5c:04:a4:b4:44:13:
e7:cf:fc:3d:a0:a0:96:88:71:a2:6d:37:8e:b3:46:
9e:a6:b7:78:f3:33:32:ab:48:ce:e7:bb:39:d6:ba:
5f:fc:6a:12:66:2d:61:21:0c:11:93:72:a4:37:9b:
5d:4f:e2:6e:47:9f:01:5c:a4:97:8f:79:9e:82:63:
87:50:94:87:c0:a1:26:e1:a0:05:8c:b9:f8:c7:e4:
23:f1:f1:93:c0:f4:f8:4f:03:85:16:20:55:22:e1:
70:9d:96:13:fe:11:ac:bd:cb:48:01:6d:9b:d6:e9:
50:6d:4e:b6:4e:3d:3a:a4:6b:80:0a:69:dd:39:6f:
ce:57:9b:fc:1e:d7:e2:cc:2a:6f:f8:56:b0:b8:e4:
62:b1:55:79:77:d3:9f:a6:25:6c:00:68:e6:bc:3d:
c6:12:43:87:7e:f4:76:2f:ca:e6:10:17:e0:28:76:
9f:0f:cf:78:52:cd:d6:96:02:50:c6:3f:fd:fd:a5:
e3:21:88:71:80:61:9b:cb:63:df:ae:6d:e9:4a:5b:
e3:54:14:2c:a4:12:a0:35:11:cb:36:5d:f3:f6:91:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:50:0A:D0:B7:81:45:4D:65:D0:63:F8:47:D6:BF:40:05:25:FD:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl
X509v3 Authority Key Identifier:
keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer
sbgp-ipAddrBlock: critical
IPv4:
138.128.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:be:fc:21:6a:a8:39:f3:bd:cb:1f:88:e0:e4:4b:46:8b:bf:
fb:ed:25:6a:b9:5f:b3:bd:be:13:fd:e0:c1:d4:47:61:29:73:
d4:37:6d:60:12:83:20:14:44:5d:c4:35:c9:40:c0:e6:2d:df:
29:3e:78:6c:b6:8a:4d:a8:46:1a:71:a7:65:af:8a:47:4d:0c:
50:34:85:22:0d:2f:cd:d8:17:7d:e3:a9:c4:ef:b2:f7:22:58:
0c:9d:d4:e7:22:99:73:32:33:c5:79:a5:6c:d0:40:da:77:98:
57:f5:c8:15:45:bc:9b:7a:de:b5:35:62:d7:b9:e0:16:a3:fa:
fc:a0:3e:44:cd:4d:ab:0a:82:6a:aa:97:52:cc:07:ac:6d:61:
e6:7f:0e:18:0b:ec:0f:e4:6e:1c:a7:e1:bd:89:87:78:16:52:
d5:d8:30:88:f6:89:ca:d6:ca:01:ed:bf:22:86:4d:3b:29:48:
33:09:f6:11:b6:d3:77:16:d3:eb:f9:07:08:3f:d3:5e:8b:a1:
b9:21:c8:70:08:89:fd:bc:bc:ec:2f:5a:e8:da:be:5a:06:a6:
ce:40:5a:11:c9:a8:44:88:a2:59:ca:e6:f3:e9:e2:e2:8b:b3:
58:b6:8e:96:e1:2b:8d:1c:d5:46:d9:61:12:0c:f5:b5:ce:95:
fe:c0:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:12 2025 by rpki-client on console.sobornost.net