
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa
File: 05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa (raw, json)
Hash identifier: WE3AGTDNy0juAGrku2xcD8YN66BIf11OjpA3TS9dpYE=
Subject key identifier: 11:7A:48:5D:EB:DB:44:7D:CA:D4:54:8E:B8:8E:0B:79:08:D0:01:05
Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Certificate serial: 010D0C9F432858493B83DCCAD70ED025B141A500
Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa
Signing time: Tue 18 Mar 2025 20:32:12 +0000
ROA not before: Tue 18 Mar 2025 20:32:12 +0000
ROA not after: Mon 16 Jun 2025 20:32:12 +0000
asID: 55039
IP address blocks: 136.242.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3b:83:dc:ca:d7:0e:d0:25:b1:41:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Validity
Not Before: Mar 18 20:32:12 2025 GMT
Not After : Jun 16 20:32:12 2025 GMT
Subject: CN=4328dab5-8c78-4044-ab44-041c674cd4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:73:b0:6b:f8:35:5a:14:65:4c:90:99:35:
1d:66:4e:ab:0a:ed:89:b7:9f:61:e5:53:36:af:56:
4e:8f:a1:0c:ea:7c:c7:41:14:d8:88:ce:a1:95:72:
2f:ff:21:80:65:b4:cc:a1:11:a1:2b:a9:d3:9c:db:
69:35:5a:2a:b2:9a:0e:9a:bb:fa:69:55:2f:c2:35:
86:11:33:ac:85:a7:1d:17:69:43:42:50:62:c3:a8:
1a:83:77:e5:d8:65:23:e2:a1:fa:03:3f:ff:ef:c1:
8e:67:d9:54:31:3a:d2:f6:f2:b5:48:88:1c:62:a7:
04:98:73:04:e6:a3:75:9a:9c:90:87:8b:72:0b:82:
b2:f9:8f:7f:55:74:d0:f6:45:fd:f5:4c:7f:ed:10:
05:5a:bf:90:f1:a1:c0:31:7f:d8:cc:8d:35:d1:d9:
70:fd:a4:bc:75:e8:09:9e:23:5e:e4:2c:98:0e:fb:
6e:95:76:46:3f:3d:cf:a5:87:4d:45:55:4b:e3:ad:
28:31:92:e2:7e:3e:af:59:66:3a:d5:f4:0b:69:d0:
85:0a:65:6b:85:4f:b5:81:15:1f:1f:46:0f:e0:b4:
30:e5:4f:d4:1e:15:51:b2:3b:4e:1e:b0:64:db:b1:
92:00:c6:7f:41:ad:c2:30:90:7c:9f:6a:d1:23:8f:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7A:48:5D:EB:DB:44:7D:CA:D4:54:8E:B8:8E:0B:79:08:D0:01:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
X509v3 Authority Key Identifier:
keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
sbgp-ipAddrBlock: critical
IPv4:
136.242.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:fc:f4:f0:41:bc:db:99:fc:17:30:42:ab:d3:4b:e4:4d:d6:
cc:0b:fe:87:f2:d6:1e:3e:b7:f9:58:a1:5f:c6:c9:0e:67:6c:
71:34:63:12:a4:4f:17:1c:78:12:6b:b2:10:b9:c4:c9:80:a2:
a7:0b:d9:ec:7d:f6:91:ac:da:e0:58:14:cb:48:6b:67:1a:cc:
09:f4:91:b6:96:ce:8a:43:51:4b:6f:29:4b:a4:8a:cd:7d:b2:
aa:3b:ca:9a:1a:cc:1f:f3:65:d1:e8:45:a2:00:63:e6:d3:74:
53:02:31:e3:33:12:f6:70:06:c1:8e:94:07:79:1c:66:62:91:
9a:eb:62:44:5b:d1:8d:ae:19:5b:b6:6b:55:87:97:24:49:cf:
ab:a8:35:3d:78:f0:da:b4:08:61:0a:ed:cc:25:6e:8b:0f:34:
09:d3:11:b3:b7:e1:ca:2d:fe:66:2c:98:56:9b:a5:a5:a7:e7:
7e:fb:dd:2d:9e:10:18:3a:ef:1a:9b:fa:7b:86:4b:74:be:71:
1d:29:4a:0c:de:b8:1f:59:fb:7f:2a:50:d0:88:a9:89:e4:c3:
d1:50:65:b3:89:25:38:1d:23:0a:37:f9:5b:9e:42:a7:40:b8:
c7:a0:bb:c3:31:9a:75:f9:4e:fb:b5:3a:99:97:91:ba:63:a8:
d3:3b:6a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:38 2025 by rpki-client on console.sobornost.net