Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a2d93c4-0667-394c-9872-04990e8e7410.roa
File: 1a2d93c4-0667-394c-9872-04990e8e7410.roa (raw, json)
Hash identifier: idCpCgcB3khwlmTwOAQt/xIfTS+INp11mv44h27U8EQ=
Subject key identifier: A7:D8:4C:6B:EB:33:FB:AA:2C:E2:A8:BD:56:D9:C1:16:1B:0B:41:7C
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F432858496FAF0E0C03496B74E27DAAA0
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a2d93c4-0667-394c-9872-04990e8e7410.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 6621
IP address blocks: 67.47.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:0e:0c:03:49:6b:74:e2:7d:aa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=4c6b4bab-f523-4cf0-bba1-b054320a9ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:d0:f9:1b:79:41:64:0c:10:81:92:d4:40:
c2:6e:7d:fa:83:fe:da:c2:25:8d:6a:46:5b:0d:d7:
ed:c7:ff:13:19:a9:e3:3a:37:1d:75:0b:10:e4:05:
c9:b5:b4:a0:0e:b0:35:46:69:5b:21:01:84:fa:6f:
9f:f9:e6:d5:a1:bc:8f:a9:07:6b:4e:c3:20:ad:20:
25:02:f9:41:d7:65:eb:81:ff:92:95:ff:1d:76:2b:
8c:bb:a0:cf:d5:b1:43:70:b1:69:1b:d8:0d:33:3c:
8d:74:ba:bf:36:d6:68:89:53:bb:7d:92:64:4e:0d:
10:5e:4e:d5:ec:45:45:9c:44:6b:5f:df:ea:da:c2:
97:b6:46:4b:d0:8d:d8:9b:f7:16:71:3a:7b:72:cb:
66:81:b8:4f:d7:c3:21:f4:d0:5d:02:f4:75:0d:84:
4d:c8:f7:f6:8b:86:89:12:99:ee:52:3e:8c:ec:21:
e8:14:ff:3e:9c:e0:f7:0b:79:20:51:a9:db:15:97:
53:ea:d0:d0:ea:40:c3:8e:03:43:c0:41:90:f6:86:
ae:ba:33:5f:e3:b6:c3:7f:bd:ba:94:38:a9:e7:ba:
20:22:4a:f0:9f:f5:72:97:7d:11:05:79:45:97:cd:
7a:9e:b0:34:dc:98:1f:bb:2a:6a:99:b6:c8:9e:2e:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D8:4C:6B:EB:33:FB:AA:2C:E2:A8:BD:56:D9:C1:16:1B:0B:41:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a2d93c4-0667-394c-9872-04990e8e7410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.47.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:86:67:2b:20:e4:4e:59:53:4b:3e:92:af:f4:50:94:56:93:
9c:e3:b4:ab:5d:70:38:50:a1:0f:73:65:6b:1a:7b:23:f0:64:
e4:55:4a:87:23:42:ea:66:8e:01:0e:d9:a2:cc:fa:2a:67:ab:
50:cb:2b:17:db:81:25:f6:f6:61:46:e1:fc:8a:68:51:f8:a2:
d2:40:eb:ec:6e:53:cc:e9:71:f6:92:8d:d6:e4:cb:97:b5:a7:
cd:25:35:cc:a0:d0:de:23:57:e4:92:de:d8:63:c9:3d:cb:e5:
bc:4b:80:11:0d:cb:c9:fc:2d:b5:71:79:b2:eb:b8:06:50:8a:
10:cf:99:e8:f3:b1:9e:3a:ba:aa:f7:bd:b3:79:39:96:54:ee:
7f:9a:7e:67:40:26:a6:3b:b0:ac:3c:66:7d:0c:0d:4c:95:37:
9f:a1:7a:7f:6d:b0:8d:eb:fd:b8:50:aa:01:d3:c7:ae:8b:9a:
ef:52:ad:5d:11:f9:d8:3b:06:66:1c:e4:72:33:b3:c0:41:98:
f4:0a:08:02:3f:58:42:dd:cd:6f:fb:ad:96:52:c9:8e:0a:68:
91:7f:57:7c:2d:7c:4c:58:3b:d3:3c:a7:c7:2d:72:c9:98:7a:
27:2c:c6:7f:9f:c7:cf:98:fd:c7:d9:ec:55:a3:2f:10:cb:7d:
5f:31:f5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:41 2025 by rpki-client on console.sobornost.net