Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa
File: 5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa (raw, json)
Hash identifier: b4ksMSWZeBqPki+qDHgM/svV4p58+gmHZ0wyH+1/2jA=
Subject key identifier: 35:07:C6:B9:AC:D3:D0:5D:00:82:80:96:C8:4D:EA:B5:22:8F:D7:89
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285848F4F6A2D1A0D2ECE37F4B5A80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 3477
IP address blocks: 140.208.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a2:d1:a0:d2:ec:e3:7f:4b:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=3e0d75b4-d96f-46f5-988d-0ff694022bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:5f:b1:97:b9:41:26:06:02:da:fa:a4:82:
c1:09:06:ef:d1:9e:b1:83:e9:66:46:0f:56:d2:ab:
4b:cd:6c:50:7b:66:87:1e:02:75:4e:1e:2f:84:93:
d6:3f:eb:52:fc:b1:83:4b:0e:f9:e8:4d:c1:f0:9e:
e2:54:cb:87:e4:7d:df:c5:09:95:11:25:fe:cc:36:
ca:39:3c:24:d3:7e:80:9c:ad:4e:7d:60:3b:05:6e:
b5:2b:d6:69:0a:98:46:0e:77:91:9e:bd:e6:9b:ac:
3a:6d:4e:8d:98:ea:b2:69:f1:3e:f7:37:e1:da:36:
b2:70:7f:60:6a:88:68:2f:a3:1f:27:79:a6:3c:e4:
62:f6:d5:04:58:83:b2:39:49:82:fd:17:cc:21:fe:
90:64:91:79:45:e3:fa:fd:e3:ca:6f:9e:bf:c1:30:
8d:18:53:78:a6:00:97:2e:ac:29:35:31:42:93:83:
52:74:df:3c:54:9c:e0:86:51:dd:13:e8:e3:0b:cd:
8e:46:b1:0b:7a:20:04:91:ff:e6:cf:9d:38:98:89:
ae:01:3a:c3:4d:bb:06:45:cf:2b:90:b1:8d:c2:8a:
80:75:84:41:9a:c7:68:22:e2:62:47:bc:57:a3:ff:
fb:5a:00:5d:f2:e3:eb:80:a9:93:a2:f5:fb:8b:37:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:07:C6:B9:AC:D3:D0:5D:00:82:80:96:C8:4D:EA:B5:22:8F:D7:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
140.208.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:e5:f9:fb:61:ad:6b:a2:40:53:13:4e:98:ef:24:8e:bf:c8:
a7:a4:f4:4c:d5:fe:bf:59:f8:3b:03:da:16:e8:c1:be:fd:1e:
9e:e3:ce:ea:a1:5f:39:44:55:5b:b4:29:87:cc:8d:e6:17:59:
d8:0d:1f:71:a3:f3:be:3c:0a:97:3a:a1:2e:65:26:e0:69:1e:
5f:83:d0:77:78:6a:3c:d1:e2:e1:1b:d9:ea:5c:c5:9e:82:4b:
18:13:7e:dc:62:0d:ca:40:b1:1a:b9:21:4b:0d:0e:65:89:ca:
99:02:f2:0d:6d:fe:5b:17:c2:70:f5:99:a5:58:bb:8b:d9:33:
0e:a4:11:7a:67:4d:ed:02:40:d0:11:b2:d6:e8:15:13:f1:21:
c7:ba:90:82:6e:4e:6d:a4:64:86:25:66:aa:93:c2:5c:f2:0a:
9a:ca:7c:e7:3b:17:58:90:28:5f:fe:b5:07:72:1c:ba:32:0c:
c6:26:23:a6:46:ea:1d:4b:0a:46:0b:cc:53:12:82:5b:a9:0f:
42:ac:37:92:a8:65:7e:ba:a6:cd:8d:2d:24:cf:a0:fd:35:dd:
9c:42:b8:84:63:fd:d0:7e:64:b4:a8:40:07:6e:86:28:44:a7:
e9:2b:41:ab:ec:9a:98:c0:75:d0:72:a6:7a:75:dc:d2:d7:10:
e0:d2:78:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:32 2025 by rpki-client on console.sobornost.net