Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34cbe6ad-2fbd-3389-8464-c0401b36080c.roa
File: 34cbe6ad-2fbd-3389-8464-c0401b36080c.roa (raw, json)
Hash identifier: qwbPJbQshSg9Fz0lsDnbzt50TGX5N7o0tW0+vaH2Bzc=
Subject key identifier: 0F:B1:D0:C7:68:24:AF:01:FC:27:F3:23:6D:0D:3F:05:6C:6F:C9:27
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921345904B4FF21466FC41700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34cbe6ad-2fbd-3389-8464-c0401b36080c.roa
Signing time: Sun 09 Mar 2025 10:20:58 +0000
ROA not before: Sun 09 Mar 2025 10:20:58 +0000
ROA not after: Sat 07 Jun 2025 10:20:58 +0000
asID: 15321
IP address blocks: 207.164.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:59:04:b4:ff:21:46:6f:c4:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:58 2025 GMT
Not After : Jun 7 10:20:58 2025 GMT
Subject: CN=b7af3cfe-02eb-4cbb-ba3e-444149485882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:aa:01:e3:aa:11:f6:7d:55:f4:cf:f0:4e:
55:51:ef:e0:57:b4:1f:05:56:8e:bb:f1:59:6b:70:
e3:b5:2b:cf:58:f0:5f:fb:e8:8b:f6:4e:a1:51:03:
bd:41:d2:85:29:e3:5c:07:b2:e3:cc:cb:d4:7f:4f:
e8:59:8f:dd:15:8b:46:a9:4b:38:47:2e:b0:a5:ce:
35:d8:e0:55:19:aa:4a:96:11:e8:29:6c:6f:6e:c3:
1a:2e:12:74:e2:9d:ec:5a:da:80:37:81:b4:02:cf:
4f:67:b3:db:dc:59:53:db:23:41:31:44:c7:75:6d:
d3:c2:e7:10:33:e3:cc:99:63:15:53:0b:4b:db:6c:
49:e6:78:8c:1c:76:a7:b5:25:bc:f7:0f:d9:b5:0a:
c9:b0:37:84:52:e2:28:a4:22:3b:3a:89:55:3c:b5:
65:c4:1c:af:a6:88:80:15:a3:6b:27:af:8b:db:ff:
66:d0:3d:61:11:c6:94:17:45:ae:91:c7:a9:05:ba:
f7:b4:85:67:27:d6:cd:18:09:b4:49:ea:5e:06:a0:
9b:56:e4:1c:a8:02:bb:23:4f:b0:d0:29:21:39:61:
47:11:13:24:25:4f:67:00:d7:51:ba:71:75:3d:2b:
ea:78:83:7a:b1:b9:38:ba:c7:88:45:8a:a0:08:2b:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B1:D0:C7:68:24:AF:01:FC:27:F3:23:6D:0D:3F:05:6C:6F:C9:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34cbe6ad-2fbd-3389-8464-c0401b36080c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:77:01:19:a9:bf:4c:5b:b4:12:bc:ce:34:e4:a6:6e:a3:d9:
5b:b5:d7:e1:09:d8:7a:95:d5:2e:a4:29:cd:2c:11:9f:4c:0e:
05:84:ec:18:97:be:7f:30:03:62:09:4f:56:08:96:ab:2a:2f:
dd:60:2c:83:cc:da:4f:be:6f:79:bb:98:4f:0e:ae:ad:f2:fc:
9c:b9:98:e6:16:1c:42:8d:85:c7:b2:ab:b1:26:b8:42:3e:b2:
8c:9f:c4:3e:ac:47:35:68:87:b4:3a:be:d1:02:41:5c:af:69:
74:ed:af:01:27:d3:ad:0b:15:89:3e:1f:eb:75:de:ce:76:f4:
1f:ee:3a:0c:2c:6a:38:90:09:04:df:f7:1a:a0:c0:7d:e4:6d:
73:e1:d3:f4:c3:84:e8:c5:fe:f8:b0:e9:07:e5:da:43:18:69:
9c:27:81:5f:fc:55:e7:d7:20:f0:fd:ae:4d:f5:a2:63:5e:da:
92:60:88:f9:a9:b6:a4:36:b4:68:cd:67:17:79:f1:34:be:12:
d0:d5:1f:1d:07:c0:b5:eb:93:2d:1b:98:66:4c:b3:36:01:e1:
de:25:b7:64:cb:38:15:72:b6:e8:79:b4:af:af:92:d3:fd:6f:
71:6a:e3:03:81:16:ec:a7:0a:d4:62:96:25:67:f5:a5:fc:87:
56:2d:9f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:33 2025 by rpki-client on console.sobornost.net