Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa
File: 895b35f2-676a-36ad-9bd6-7860fc097fbf.roa (raw, json)
Hash identifier: XxsHwqsMv6t+mCVYCPKehq4/kSeCZowL6Od5otHpdoI=
Subject key identifier: CC:A4:61:EE:60:C9:95:59:EB:66:6E:3A:90:A1:04:17:45:03:30:3C
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858495ABEB2942C93C1A398F97780
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 203
IP address blocks: 20.133.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:b2:94:2c:93:c1:a3:98:f9:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=fb9e6f32-7bca-428d-90b2-792ec5ee80d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:6d:af:d6:dd:64:7e:c2:af:be:2c:d0:e8:
f1:a7:82:89:bf:a2:c6:c9:38:de:36:3d:eb:c8:5f:
e8:34:95:02:72:9f:63:6d:ae:0f:97:55:5e:09:08:
4c:9c:6f:bb:f2:ed:4d:33:ac:78:f9:36:77:dd:67:
59:42:6e:79:13:da:91:75:26:e6:5c:fd:7d:c7:5f:
49:2a:8b:5b:e2:be:db:99:98:89:3e:76:13:d9:22:
0e:0e:27:dd:85:fc:9e:f4:06:b6:3c:50:56:f1:eb:
3d:b0:b7:e9:f5:86:a0:f4:2d:f1:59:ac:88:be:bf:
75:f3:52:f1:84:6c:87:f7:fe:dc:7a:ce:24:28:91:
4d:aa:09:ce:7a:54:b3:f0:ad:c1:34:a1:05:af:bd:
12:04:e1:3d:ff:ed:78:c8:e9:db:1b:4d:fc:c5:70:
62:01:26:06:5d:46:ad:38:01:ab:75:c8:7f:75:d2:
eb:b4:b7:55:5a:9e:a2:46:f5:9f:08:07:92:1e:90:
1f:d4:fb:ce:68:50:b0:7c:6a:93:cc:46:3e:18:fa:
bb:11:8e:d3:79:36:6c:d0:3d:53:fc:aa:6e:ed:85:
e2:b1:28:dc:60:41:9a:87:c8:47:02:d5:d6:6b:59:
8e:8c:3d:76:e2:1b:c2:7f:fc:4d:62:6c:41:3a:e7:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A4:61:EE:60:C9:95:59:EB:66:6E:3A:90:A1:04:17:45:03:30:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:6b:87:2e:b9:e2:7b:ae:78:9a:cb:ed:3c:78:82:b1:11:24:
93:58:3e:23:37:27:10:3e:94:db:cc:9c:6a:f2:2c:94:d5:72:
8b:fb:5d:73:92:d6:d5:11:6c:44:c6:4e:4d:aa:9c:29:ad:2a:
5f:0b:23:92:87:80:19:2b:5b:b5:63:9d:41:b8:7e:60:11:02:
bd:46:90:f8:73:1f:da:a3:b6:cd:29:4f:56:b7:b3:1b:3f:68:
3e:fe:d3:a6:8f:4d:6e:90:53:09:d9:8d:f5:db:69:00:6f:08:
78:35:62:df:24:b4:5b:8d:67:1f:3e:0b:82:7d:ce:a2:e4:73:
fe:8d:a2:47:41:ac:c0:f5:1d:2f:54:d9:8a:e8:f3:51:83:f7:
e5:81:49:fb:65:e8:7a:97:0d:09:86:35:c3:7f:dd:1a:af:ff:
93:2e:f3:5b:66:5e:0b:30:2f:71:53:7f:85:53:ab:51:1e:c4:
23:18:31:77:a1:71:13:44:4a:22:27:c1:ca:59:52:40:d3:9f:
b2:0d:d7:73:30:c9:98:32:54:f3:47:17:f0:42:5a:36:26:5a:
08:71:3c:d8:aa:7f:e2:1f:09:62:b9:86:7f:2d:3f:3c:8d:73:
e3:de:76:30:15:d7:8e:ff:51:3d:2b:a4:41:98:98:70:49:c4:
50:d0:1e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:30 2025 by rpki-client on console.sobornost.net