Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa
File: 1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa (raw, json)
Hash identifier: nFwrl3MMtRHMhzEExp9pwoKhZJCtqFZlCk9VesWp3ss=
Subject key identifier: B6:E2:60:E4:60:3B:45:E4:A8:45:B6:83:F7:7D:82:C2:D6:09:F6:AD
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F432858496FAF09BCE35FB53255387300
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 6621
IP address blocks: 97.72.0.0/19 maxlen: 19
97.72.32.0/21 maxlen: 21
97.72.40.0/21 maxlen: 21
97.72.40.0/24 maxlen: 24
97.72.48.0/21 maxlen: 21
97.72.56.0/21 maxlen: 21
97.72.69.0/24 maxlen: 24
97.72.70.0/24 maxlen: 24
97.72.73.0/24 maxlen: 24
97.72.74.0/24 maxlen: 24
97.72.80.0/20 maxlen: 20
97.72.80.0/24 maxlen: 24
97.72.81.0/24 maxlen: 24
97.72.84.0/24 maxlen: 24
97.72.85.0/24 maxlen: 24
97.72.87.0/24 maxlen: 24
97.72.88.0/24 maxlen: 24
97.72.94.0/24 maxlen: 24
97.72.95.0/24 maxlen: 24
97.72.96.0/19 maxlen: 19
97.72.128.0/19 maxlen: 19
97.72.161.0/24 maxlen: 24
97.72.162.0/23 maxlen: 23
97.72.164.0/22 maxlen: 22
97.72.168.0/21 maxlen: 21
97.72.176.0/23 maxlen: 23
97.72.178.0/24 maxlen: 24
97.72.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:09:bc:e3:5f:b5:32:55:38:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=ca29cdfc-2bda-43d9-852b-7d417249a9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:58:c7:ce:90:55:87:63:a4:6f:0c:c4:46:
c2:47:7f:1b:27:61:b0:c8:67:74:d6:a1:91:63:7f:
17:66:86:12:c6:30:b9:5e:61:63:a8:94:39:36:49:
62:57:1d:72:22:66:c8:1f:e2:1c:45:96:91:fe:03:
13:ed:1f:db:15:e5:b1:af:63:88:7c:25:2c:d7:0c:
3c:a4:c7:bf:af:3a:e0:76:a4:11:95:04:b6:28:c1:
f8:3b:bb:96:aa:5c:01:6a:bb:91:8f:9a:84:3f:3c:
b9:25:d8:03:16:a2:4d:03:91:5b:25:7c:de:09:a7:
f3:bd:d6:9f:36:fd:0f:9e:e4:6c:5d:3b:a1:67:24:
3b:0e:c6:05:1e:83:d9:05:b9:7e:a2:75:c5:60:6d:
f4:d9:34:de:8f:08:26:88:0d:49:ff:3f:8a:b7:5b:
e3:4c:d7:26:3b:8c:dd:79:5a:6a:77:98:c7:b6:b3:
41:35:be:47:b8:f6:28:4d:dc:8c:48:a9:63:57:bb:
80:c1:ce:f1:d3:2c:09:0b:b7:8c:c7:fb:32:ae:46:
04:06:04:9f:2c:7b:03:17:26:d3:c7:ec:e6:21:b9:
26:ef:91:47:e2:ba:95:db:ed:91:4b:07:39:dc:5b:
1b:3f:32:c8:05:45:a1:a1:56:20:ef:52:27:bd:01:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E2:60:E4:60:3B:45:E4:A8:45:B6:83:F7:7D:82:C2:D6:09:F6:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
97.72.0.0/18
97.72.69.0-97.72.70.255
97.72.73.0-97.72.74.255
97.72.80.0-97.72.159.255
97.72.161.0-97.72.178.255
97.72.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:54:4f:b3:d3:87:1f:98:5f:27:c9:46:18:76:b7:56:5a:ca:
9e:62:43:d2:5f:cf:2a:97:5f:5c:9a:39:d2:c2:c6:3d:24:07:
1f:34:30:1a:c1:d7:92:34:77:3b:34:63:24:27:05:e0:66:a2:
c2:a8:b5:24:a4:3d:ec:57:20:7f:81:6e:b1:86:72:05:c3:12:
d3:ec:89:14:82:5d:26:7a:80:1a:d4:24:5a:38:6a:cb:0f:5b:
c7:3a:a8:da:b2:ea:b9:44:14:d2:c4:08:60:46:f3:bf:eb:2b:
de:7d:cb:1a:f1:75:26:cb:05:09:88:85:81:12:9d:77:58:6a:
99:7f:e8:6f:9e:bd:d8:68:fc:13:c3:0d:6c:9f:4c:07:56:dc:
94:2e:78:35:be:56:f8:ba:a6:0d:2f:bc:fd:79:cc:99:0c:b2:
35:ae:1f:8e:f1:eb:73:48:3b:54:8d:60:9f:32:f8:ca:c8:df:
fc:65:42:c5:b9:f2:89:bf:a4:12:e9:be:8b:6d:9a:d5:2e:40:
2a:95:7a:44:38:a6:05:cf:ba:23:ab:5c:e0:a8:95:be:42:05:
fd:4b:93:61:9a:03:6b:5d:d2:ab:64:db:63:fe:e1:f7:dc:5a:
d9:dc:c1:cd:52:b3:dd:2d:40:8b:4a:17:f3:8e:3d:7b:d7:d3:
4e:23:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:41 2025 by rpki-client on console.sobornost.net