Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa
File: 1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa (raw, json)
Hash identifier: 4bmnrdAckJnOirGYObw93ETqO6Ae00aJkqKTVyZ1bzk=
Subject key identifier: FF:3D:73:B3:53:A8:2A:ED:59:E7:06:B5:91:1C:B2:26:F0:86:50:33
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858495D896E29EBB7C8063CDE0C00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa
Signing time: Mon 31 Mar 2025 01:00:47 +0000
ROA not before: Mon 31 Mar 2025 01:00:47 +0000
ROA not after: Sun 29 Jun 2025 01:00:47 +0000
asID: 0
IP address blocks: 192.58.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5d:89:6e:29:eb:b7:c8:06:3c:de:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Mar 31 01:00:47 2025 GMT
Not After : Jun 29 01:00:47 2025 GMT
Subject: CN=8c470b03-f4fd-449a-9cbf-e686fa0293e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:ec:b5:c2:99:59:67:f5:33:11:61:38:a3:
40:63:23:0f:a0:0a:a2:c7:c2:93:9a:50:4b:f5:c6:
dc:20:51:6d:fd:3d:53:c6:c5:a1:6a:81:ae:7e:84:
88:0a:b7:32:8d:43:ab:d3:1a:fa:e3:05:ad:d2:f5:
9d:0c:5f:9c:2c:10:d8:77:d8:84:32:61:da:59:44:
e1:a9:54:84:e9:e5:77:ea:2e:7a:f0:fe:91:c1:ef:
67:ab:a3:83:43:f8:fb:a2:22:54:2f:6c:c0:62:3f:
19:81:1b:e0:30:7d:e5:bf:1c:e4:d6:27:c7:ae:b3:
05:69:a3:70:b0:dc:3a:61:b8:63:d8:1c:19:10:06:
a1:2d:6d:33:2c:95:59:8b:2c:de:dd:7e:9e:c2:25:
d3:07:5b:15:66:ea:70:fe:e0:c3:58:51:33:ed:62:
ff:76:05:51:b3:ff:96:dd:8c:b7:73:ab:65:e7:c6:
2b:ac:4f:31:c8:c3:16:f0:f3:1d:af:59:46:a6:72:
38:83:74:d6:04:3f:c1:d3:d2:c7:00:5f:8a:84:69:
07:b5:35:f9:d4:86:84:38:2b:c0:e4:07:84:dd:8f:
75:35:21:32:6a:42:bd:ef:5e:58:9f:23:7c:7c:8e:
ce:24:97:7b:59:40:2a:98:82:69:d4:7a:41:bc:db:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:73:B3:53:A8:2A:ED:59:E7:06:B5:91:1C:B2:26:F0:86:50:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:bb:32:39:d8:69:90:2b:a5:34:f7:78:80:99:fb:a7:4e:da:
c7:f6:e1:4f:60:89:15:ee:bc:68:bb:32:79:a8:e7:19:b8:b9:
79:20:8b:2e:cf:5d:7e:fd:bb:c1:a7:cf:cc:ae:0a:67:e5:9e:
d8:d3:db:5c:78:96:98:1c:04:d4:19:f7:10:bc:98:56:bb:ba:
34:da:97:27:e6:ca:e2:29:83:83:73:09:fc:4d:41:ee:8b:ca:
db:ec:58:8f:08:af:c5:b8:28:98:8c:aa:11:76:8d:83:01:07:
22:cd:68:90:d3:8e:c6:db:68:22:39:2a:51:59:c5:4f:ee:ae:
4a:38:51:9d:1b:eb:5e:06:9c:47:31:89:ad:79:80:5e:01:1e:
ef:e5:cf:2a:ac:88:90:36:e0:59:62:cc:b6:fa:5c:f0:a4:9a:
11:19:ae:a0:3a:ef:fe:06:57:25:7d:2b:fc:04:30:e2:9f:18:
7a:c3:95:23:7a:fe:84:49:3f:04:e9:fe:66:c5:21:6f:2c:f9:
55:3d:30:9e:3d:ca:80:7c:c8:a1:97:cc:0c:a6:31:38:7e:f1:
3c:da:57:15:53:8e:bf:21:87:00:f5:e4:54:74:1b:2d:19:d7:
00:42:0d:93:0a:0e:30:f4:2f:50:87:e1:90:1e:43:a9:fb:07:
b5:1c:0a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:31 2025 by rpki-client on console.sobornost.net