Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/38480fec-ca78-38fd-accd-60e691a2b910.roa
File: 38480fec-ca78-38fd-accd-60e691a2b910.roa (raw, json)
Hash identifier: 6/A7BS+aVdwkKMtHUmr5BylRYGCW4/bCEyaL2xUtfbE=
Subject key identifier: 78:39:00:DD:E5:1D:9D:D5:EF:5F:58:B4:BB:24:BC:F1:F6:7B:AB:C3
Certificate issuer: /CN=69f287f7-f860-4e10-9fc2-d79998155e05
Certificate serial: 010D0C9F432858495EEEDB0C4BF279E97E9349C0
Authority key identifier: F1:44:9C:74:18:36:66:9B:81:79:0B:3D:DA:D2:BA:79:A3:23:EF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/38480fec-ca78-38fd-accd-60e691a2b910.roa
Signing time: Mon 31 Mar 2025 13:00:59 +0000
ROA not before: Mon 31 Mar 2025 13:00:59 +0000
ROA not after: Sun 29 Jun 2025 13:00:59 +0000
asID: 395046
IP address blocks: 69.64.28.0/24 maxlen: 24
69.64.29.0/24 maxlen: 24
69.64.30.0/24 maxlen: 24
69.64.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:ee:db:0c:4b:f2:79:e9:7e:93:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f287f7-f860-4e10-9fc2-d79998155e05
Validity
Not Before: Mar 31 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=8985d5c2-4c17-49b1-bb56-973e2e8c738d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:69:2d:ca:2f:a5:35:59:eb:60:fa:e9:58:
a5:2a:43:a2:52:df:5b:58:2f:29:b2:93:2a:60:a9:
e2:33:3b:5b:29:94:88:e7:57:ca:19:15:89:57:ce:
ac:41:19:11:af:da:35:79:24:66:74:2b:9e:fd:03:
1a:41:23:6d:35:60:eb:79:0b:b1:91:03:c4:fb:00:
0d:fc:5c:89:57:61:2f:17:71:da:60:53:21:67:30:
7f:03:e0:dc:b5:59:69:fd:71:2b:88:e2:77:62:cd:
6c:e4:95:1c:21:f8:0f:95:2f:8e:2d:bf:7b:af:a6:
e1:88:3e:d8:0d:1e:3d:62:b5:99:cf:e9:ea:89:32:
3a:f7:d0:93:34:54:4f:a5:1c:ef:df:fd:43:a1:c5:
1c:b4:53:d4:8a:4a:33:0d:6a:2e:a6:0b:83:cb:b7:
9f:98:d3:95:6f:ee:2c:42:a5:b4:ed:a8:9e:3f:58:
cf:43:91:ad:1c:7e:2e:ea:7a:2a:56:58:ce:ab:c4:
5e:a4:9d:fc:a1:10:53:57:b0:13:b2:84:1d:b4:3d:
3f:3c:c2:d1:c6:72:8d:ec:bf:f7:07:8a:47:ee:0b:
c6:90:77:01:e4:53:22:74:01:9d:75:14:43:45:67:
09:06:a3:a2:27:bb:9b:50:4f:6a:57:cd:a2:ee:22:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:39:00:DD:E5:1D:9D:D5:EF:5F:58:B4:BB:24:BC:F1:F6:7B:AB:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/38480fec-ca78-38fd-accd-60e691a2b910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/69f287f7-f860-4e10-9fc2-d79998155e05.crl
X509v3 Authority Key Identifier:
keyid:F1:44:9C:74:18:36:66:9B:81:79:0B:3D:DA:D2:BA:79:A3:23:EF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05.cer
sbgp-ipAddrBlock: critical
IPv4:
69.64.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:d2:32:c5:d0:3b:38:24:25:aa:af:e9:f5:4d:7f:bc:08:e1:
ff:41:84:9f:f9:aa:c2:fc:8f:1e:1f:ae:6a:e4:8a:d1:84:d2:
3a:10:9c:f2:8e:86:4e:c3:eb:ee:f1:3a:82:77:fb:46:a7:59:
e3:0e:b3:0e:b8:c3:9a:dc:be:f6:46:16:4a:21:f7:3a:31:33:
ce:a6:e6:c0:73:59:5d:52:a5:8a:2b:ff:e1:77:91:5a:b6:67:
36:ee:fa:ca:5e:19:4b:e8:78:91:1d:ab:2f:85:6c:ca:22:44:
4e:4d:8d:c6:b9:2d:35:76:56:07:a6:87:4a:3f:1e:67:5e:c0:
f5:eb:0a:a6:81:a8:13:f7:7c:7b:fd:d8:c8:25:b9:91:d0:5d:
e8:7c:d8:d9:1a:7e:e7:3e:14:5e:a6:63:4a:fd:81:59:8f:db:
64:7b:94:dc:4a:4a:29:71:8b:f4:bc:e9:3c:f8:90:1e:8a:8e:
54:b7:9b:f4:7c:e0:5a:62:9d:06:43:3a:9f:18:59:02:8f:8f:
66:0d:29:b5:98:05:d7:81:3a:44:be:50:7d:16:84:35:b0:bf:
61:4c:a3:3a:a9:3a:1b:3d:70:dc:c5:25:6b:aa:a6:b7:c0:1d:
21:03:de:11:ef:58:2d:35:33:79:58:af:c9:14:fd:fb:e3:63:
07:2d:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:31 2025 by rpki-client on console.sobornost.net