Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa
File: 3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa (raw, json)
Hash identifier: IqBHDMBFs2rSj7RPvrBL+jedjFOxYs0N17ixa5pt/eY=
Subject key identifier: 68:B8:7F:16:A0:0B:8C:94:9E:66:4A:59:7B:F2:2F:A6:DA:7E:EF:97
Certificate issuer: /CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835
Certificate serial: 010D0C9F432858497279A559F87BD3A35208EC00
Authority key identifier: 6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 19755
IP address blocks: 199.73.124.0/24 maxlen: 24
199.73.125.0/24 maxlen: 24
199.73.126.0/24 maxlen: 24
199.73.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:a5:59:f8:7b:d3:a3:52:08:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=ba7334e4-faea-4ed0-85c8-41b5cdfe6796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:96:0d:68:37:bb:06:60:d8:20:81:21:98:e8:
da:d9:d7:c3:3c:b3:98:bd:72:2e:f0:38:e4:57:21:
59:67:46:d5:89:93:f9:77:d2:fb:81:51:89:ca:2b:
30:ad:99:7f:15:04:6a:75:52:21:10:8f:c9:12:b4:
1c:3e:3e:5b:13:44:b0:4c:95:ff:35:4d:8d:9b:ec:
1e:6e:93:db:6c:99:11:5a:a0:f8:3f:a9:53:42:98:
dc:1a:ea:5f:5d:49:23:3e:8b:b7:66:c3:8b:82:fd:
98:b2:6a:8a:ac:86:95:bd:dd:e4:e6:85:29:77:da:
3e:92:98:b3:91:f8:57:fd:06:71:22:fd:c2:d4:2c:
16:2f:84:0e:26:b5:59:5c:19:05:cb:80:48:3d:85:
a1:e0:5b:18:ae:f7:da:5f:dd:29:48:fc:a2:a4:a9:
ee:60:1b:50:97:eb:34:f2:97:94:9c:22:92:73:cc:
80:f8:ec:35:9e:50:65:22:67:c8:39:88:e0:9d:c2:
cd:fe:fd:11:3c:24:d4:1f:19:ef:24:c5:20:eb:21:
0d:d5:16:8a:72:30:2e:52:71:4a:22:c2:43:a3:23:
ce:2e:2d:ae:7a:cb:36:9f:59:22:26:a0:01:60:f0:
2a:26:d3:6a:7c:5b:df:0f:04:25:57:57:77:c8:8c:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:7F:16:A0:0B:8C:94:9E:66:4A:59:7B:F2:2F:A6:DA:7E:EF:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.crl
X509v3 Authority Key Identifier:
keyid:6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer
sbgp-ipAddrBlock: critical
IPv4:
199.73.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:84:54:fe:54:63:6f:6c:f3:06:2e:89:97:d1:bd:4a:34:0a:
5b:18:fa:7b:2d:86:b4:7c:68:1b:9a:39:36:b8:2a:d6:e9:09:
04:3a:e9:95:4e:ef:ec:63:39:82:0c:ce:e2:75:63:5a:ed:c0:
57:c3:e5:20:6a:35:5c:de:02:25:5d:f9:f9:ee:fd:2b:3d:8a:
f8:23:bd:79:68:93:8a:47:e0:c8:87:cd:b6:28:3c:ac:44:ac:
7e:23:9d:41:3c:38:f9:47:d3:d2:30:69:4e:4c:d5:8f:52:60:
34:7c:1c:bf:54:eb:f5:28:40:2e:81:9b:67:40:0b:19:6f:46:
f7:a6:e8:4f:e8:b2:67:35:4f:57:30:34:e0:0c:09:10:3f:b5:
b4:97:e0:94:31:36:c0:d7:f0:dd:e9:d1:ac:70:cd:d2:a5:98:
67:2c:ed:e5:e9:71:9b:95:12:e3:b0:f0:77:1e:7f:be:20:eb:
b2:c4:ae:cd:43:24:7a:31:ed:fd:a4:88:3c:eb:d4:bc:c4:8e:
30:c2:4e:8c:2b:f4:ee:d3:bd:23:75:76:b7:e6:19:44:59:5d:
26:21:b7:96:74:3a:30:f7:4f:79:6c:e5:2d:0b:54:1e:67:3d:
86:bf:2f:30:b1:48:83:7b:79:f7:a8:cd:d0:33:b5:42:be:4b:
53:4a:a3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:31 2025 by rpki-client on console.sobornost.net