Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa
File: e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa (raw, json)
Hash identifier: 7thw8aeB+LwQ2rXDAQYpGtDmo4SSSbWe7dOWdXZuFyQ=
Subject key identifier: EA:EE:7F:C4:CD:66:83:0C:80:6F:39:20:5B:7B:A4:FD:5D:39:4C:FC
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F432858496A19A748C019BB715DF5E440
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 21777
IP address blocks: 206.168.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:a7:48:c0:19:bb:71:5d:f5:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=1dd2b907-ccd4-4896-a35e-5a2f5ccb0da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:9b:a1:e8:ea:9d:cf:9b:c8:eb:65:ff:47:
31:37:2a:80:d2:b5:9b:f1:d7:8a:2c:99:f0:0d:d6:
ba:a1:19:19:4c:89:b7:ad:68:f3:87:c2:6d:38:0e:
3e:26:76:d2:42:d2:18:80:80:b9:b8:a4:03:cc:44:
c9:61:79:7d:56:58:4c:eb:9b:0b:4c:1b:a8:75:de:
8e:2a:ed:fb:ea:c3:9c:a7:6e:75:0f:a2:f2:c6:90:
58:50:3b:19:3b:a8:d8:c8:4c:34:b9:09:e8:96:22:
f6:b4:ee:51:e2:a2:8e:bb:18:31:00:66:fd:55:aa:
c4:4d:43:8e:e1:1b:a2:d3:e0:34:0d:c3:8d:e0:40:
3b:49:c7:e6:6a:1a:39:65:ee:1a:56:ca:a6:9c:93:
d4:3f:f8:1d:a3:5b:1d:70:b9:d1:d6:e2:31:44:61:
fd:b2:15:06:bd:c9:1d:02:e2:29:cb:4b:dd:77:68:
37:5e:12:74:4f:b2:93:bc:34:f8:8c:c4:d8:a6:2d:
92:c0:ff:e2:7d:b3:b5:f8:a5:7a:c2:d2:e1:7f:23:
bc:84:31:f3:02:a5:f9:1a:ea:5d:76:37:d3:0f:8a:
5e:35:67:f7:da:27:a5:62:35:cb:6f:84:9c:0a:ac:
f9:18:0f:7f:4b:57:75:f9:c7:d5:d1:1d:b4:80:4d:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EE:7F:C4:CD:66:83:0C:80:6F:39:20:5B:7B:A4:FD:5D:39:4C:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:22:81:4a:58:d3:d2:46:47:c1:58:a9:c3:05:a2:eb:78:46:
0d:99:b7:18:fd:70:84:ee:bb:10:d0:01:3f:38:3a:6c:c9:3e:
29:b9:90:48:8a:48:70:45:e3:b1:b1:2c:b0:06:1b:d9:65:11:
63:39:fd:6e:38:c7:70:af:91:4b:38:d9:40:b8:80:50:1b:02:
50:e1:0b:dd:cc:b4:53:da:af:88:b0:ad:57:d9:ec:79:c2:3f:
af:2d:4d:1a:5c:0f:d1:6b:38:02:3b:5d:83:c2:c2:46:36:06:
94:93:76:c9:9b:b7:3c:4e:fc:86:11:96:76:8a:71:19:10:84:
ae:67:98:c0:8f:26:ec:67:a8:61:44:d8:56:35:16:8e:a8:70:
c1:e3:e9:88:c4:20:a5:cf:48:eb:49:03:7c:77:92:6b:39:e1:
e3:3d:42:8d:55:07:5b:03:12:f0:82:97:a1:b7:aa:ac:ac:49:
53:18:d1:54:0c:9d:b7:01:dc:93:26:ad:da:87:06:f3:8c:bf:
9c:5b:cb:3d:28:27:15:64:f7:95:74:10:91:2f:b7:8e:14:03:
d2:a8:b0:ba:18:b3:c7:b8:e3:5c:26:e6:07:cc:44:4e:09:1e:
a7:e9:c1:5a:5d:70:be:3e:dd:22:60:50:b0:50:e6:20:a9:4d:
67:d6:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:40 2025 by rpki-client on console.sobornost.net