Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa
File: efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa (raw, json)
Hash identifier: 5PoQ/eQuoCGa2LHpq4/2tTDFR7Pb64erRzQwspWizoc=
Subject key identifier: D5:17:A6:37:64:D1:6A:A6:CA:AB:65:C7:B5:E3:C5:6E:25:33:C1:02
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F432858497279A47BB93B8D22021B4C80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 6621
IP address blocks: 174.32.76.0/24 maxlen: 24
174.32.81.0/24 maxlen: 24
174.32.92.0/24 maxlen: 24
174.32.107.0/24 maxlen: 24
174.32.108.0/22 maxlen: 22
174.32.112.0/20 maxlen: 20
174.32.129.0/24 maxlen: 24
174.32.130.0/23 maxlen: 23
174.32.133.0/24 maxlen: 24
174.32.134.0/23 maxlen: 23
174.32.136.0/21 maxlen: 21
174.32.144.0/23 maxlen: 23
174.32.160.0/22 maxlen: 22
174.32.164.0/22 maxlen: 22
174.32.168.0/22 maxlen: 22
174.32.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:a4:7b:b9:3b:8d:22:02:1b:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=2b9b49ca-8af4-43ba-9d1b-c5ca8960adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7b:80:9b:ef:99:73:b2:49:19:43:df:6d:3a:
f2:cf:32:e2:21:94:a3:07:29:6f:e0:87:4d:93:dd:
a4:22:67:93:44:9e:2f:08:9e:1f:31:bc:ac:26:0a:
07:a7:ec:32:a7:65:62:29:4f:b7:50:26:5b:15:4a:
8f:74:25:2f:ea:b5:4c:aa:4f:09:9e:31:6d:ea:1a:
46:c8:74:6b:62:e8:75:a6:ec:50:96:f3:de:e7:17:
55:f0:36:9b:1c:6e:e3:e6:00:c4:a9:ce:67:32:b9:
e5:7f:b4:a4:81:96:4b:a6:c2:37:75:14:86:b5:64:
d1:88:4b:c4:55:be:ee:e4:3e:98:e8:63:3a:22:2d:
72:16:26:d1:c1:68:52:51:c6:68:74:11:5d:7b:1b:
ae:07:95:79:7f:a0:19:cb:9d:16:78:8d:ee:bf:56:
f2:40:4f:9e:b5:69:e3:a3:07:72:4b:ae:39:87:0d:
45:84:19:d1:01:83:24:66:66:b4:3f:1d:fc:0c:7b:
f2:df:84:ed:1c:a6:6f:58:d4:19:5e:e9:ac:8f:ad:
9d:49:4b:51:ef:07:ee:58:87:f5:d8:57:8b:35:33:
d2:ac:72:00:2f:79:53:e1:d3:dd:75:84:5f:43:af:
c4:93:85:34:e0:19:30:b8:1d:66:03:0d:8e:3b:33:
37:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:17:A6:37:64:D1:6A:A6:CA:AB:65:C7:B5:E3:C5:6E:25:33:C1:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
174.32.76.0/24
174.32.81.0/24
174.32.92.0/24
174.32.107.0-174.32.127.255
174.32.129.0-174.32.131.255
174.32.133.0-174.32.145.255
174.32.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:32:31:18:7f:a5:e4:5c:4a:14:3e:60:84:98:39:5b:b4:8f:
fa:50:53:30:21:0d:df:40:ca:8d:a3:dc:d2:ca:19:c5:a6:a3:
b1:78:ce:9c:19:01:86:ab:9d:85:fa:22:c9:a3:f1:fe:20:f5:
1a:78:34:7b:55:71:9e:92:68:31:e9:81:4b:43:80:e1:87:25:
4f:ba:2f:60:55:28:68:3f:bf:cf:6d:a0:be:45:d5:07:b7:08:
9f:4a:7d:e6:34:44:22:bd:38:75:21:06:4f:00:10:d1:ab:89:
7e:6d:0d:8f:d5:91:0c:9a:a5:e8:48:c3:a5:55:42:2e:cf:4b:
d1:b0:68:6d:0f:70:ca:97:f0:d7:23:80:94:6c:ed:dd:28:2a:
ee:b9:36:1e:28:67:88:1d:fc:13:9a:81:34:ea:20:b8:a1:2e:
c8:2a:f5:d4:46:6f:f6:e7:30:98:62:8d:c0:36:e3:51:80:7e:
df:57:02:11:3c:b1:97:d4:cb:aa:57:c9:19:3f:c1:bd:43:f7:
cf:e7:1f:02:76:41:ce:7d:33:55:54:70:45:cc:74:3e:54:6a:
55:51:30:bd:3a:e7:e0:1e:ec:ff:03:2e:cb:ff:b9:5b:70:13:
6e:e1:ad:4c:88:3c:ad:71:48:da:95:ee:29:c3:d6:b0:3e:48:
7f:eb:f2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:48 2025 by rpki-client on console.sobornost.net