Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/68bf5e52-08ad-328a-a598-e2824a5c775f.roa
File: 68bf5e52-08ad-328a-a598-e2824a5c775f.roa (raw, json)
Hash identifier: Uk7hw79lu9CP29cRXtZ5wmDYlpRQoqD2Hf8pxp1fr2I=
Subject key identifier: E1:C9:88:FD:1D:99:6D:12:11:AF:44:7E:14:32:F1:D3:7D:03:C1:2E
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F432858497279B152FEF639C64DA97E80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/68bf5e52-08ad-328a-a598-e2824a5c775f.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 6621
IP address blocks: 67.46.0.0/20 maxlen: 20
67.46.48.0/20 maxlen: 20
67.46.112.0/20 maxlen: 20
67.46.144.0/20 maxlen: 20
67.46.160.0/20 maxlen: 20
67.46.192.0/19 maxlen: 19
67.46.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:b1:52:fe:f6:39:c6:4d:a9:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=c9fc9e7d-4d66-4bc8-b41c-67abab1ce0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:89:2e:49:cf:d2:9a:94:6b:7d:4c:90:af:
24:e8:1a:0b:85:98:7c:05:91:80:b6:33:93:16:70:
40:1b:5e:21:e0:31:11:f2:9c:ff:6d:c3:3d:7a:9e:
5b:c9:e0:1e:b3:77:93:5b:62:95:fd:9e:db:00:4f:
2d:d6:93:1d:d8:d5:ee:16:fb:fe:6c:3d:0e:2b:c3:
0f:4e:30:bc:f5:01:39:52:bf:49:67:f2:b3:3c:c8:
fe:d5:27:2f:cc:8a:df:60:0f:3a:e5:cc:9d:63:fc:
e9:03:63:4d:e5:b6:ca:70:bf:c3:c8:c4:10:32:48:
89:ac:3f:e2:2a:2b:90:c4:d6:57:ff:62:00:0d:aa:
96:d4:33:f9:d4:72:af:a9:77:9c:3b:1f:c3:71:5e:
bd:72:f9:7e:99:8d:9e:ec:fa:23:45:96:47:06:2c:
90:f7:41:ce:7f:70:f8:4c:96:88:26:11:bf:2e:e3:
cb:c7:09:32:e7:f3:d7:e8:9b:91:68:b5:c9:4a:cf:
5f:41:ec:5f:d0:b0:49:16:42:55:93:2f:67:01:57:
3d:a8:51:71:ad:28:59:5b:40:5d:92:49:8b:35:ab:
bf:b1:c4:9f:5e:89:d3:27:67:c8:eb:bc:42:15:f3:
97:53:4a:d7:f7:cf:e1:00:c2:7e:73:5d:6a:f5:32:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C9:88:FD:1D:99:6D:12:11:AF:44:7E:14:32:F1:D3:7D:03:C1:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/68bf5e52-08ad-328a-a598-e2824a5c775f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.46.0.0/20
67.46.48.0/20
67.46.112.0/20
67.46.144.0-67.46.175.255
67.46.192.0-67.46.239.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:76:af:51:a4:05:73:32:ea:6a:25:38:65:b8:65:46:76:33:
92:bf:d4:be:0b:b5:40:dc:87:7f:be:c3:99:c6:81:13:a4:d7:
d6:e0:18:68:92:47:5a:56:dc:44:5c:b1:e5:6c:d7:60:f4:55:
9b:f1:1a:ad:5d:65:15:f7:c9:87:bf:23:7c:0b:25:aa:c6:ff:
46:28:7b:75:bb:92:e5:cb:3f:88:21:fd:9b:c9:af:33:26:f6:
55:75:af:81:ae:39:84:31:ef:95:35:ef:07:bb:77:f1:74:3b:
ac:92:2b:6e:70:15:bd:3a:fe:4f:f6:e0:78:33:46:cb:27:02:
92:d3:e0:63:83:56:c3:b3:59:d5:1b:12:6d:7e:77:06:b7:55:
ae:6f:9d:67:c9:e5:75:9b:3a:10:24:fd:a0:4d:9f:21:64:fa:
94:a4:be:6c:fc:10:8d:a0:15:08:08:ca:a7:c0:bf:a7:0c:0c:
a6:fd:cc:1f:d9:57:80:df:0b:38:07:dd:c7:fe:7d:d9:57:5c:
42:1b:0b:a9:cb:10:50:53:08:1e:23:90:6e:6b:5a:17:31:48:
a0:73:dd:b4:cc:f6:42:51:a3:92:8b:65:ca:6c:64:88:5e:d8:
70:09:bc:3d:39:52:19:3d:c2:df:96:6f:1e:c3:84:c4:52:10:
8a:cf:a8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:48 2025 by rpki-client on console.sobornost.net