Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8e53307f-303a-3c66-b97b-67d21496e509.roa
File: 8e53307f-303a-3c66-b97b-67d21496e509.roa (raw, json)
Hash identifier: IcuEsjylUPJQI5HmyS8fJBkWzZgiQ7a8RLebngRxQhY=
Subject key identifier: 05:01:A0:35:D2:66:49:9D:2D:A3:F0:9A:1E:3A:B3:55:98:27:CD:F9
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F43285849350E9910CF6132C53462AE80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8e53307f-303a-3c66-b97b-67d21496e509.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 1742
IP address blocks: 67.134.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:99:10:cf:61:32:c5:34:62:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=63b00b6a-48d0-443f-b797-78d5ca3ece0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:d3:61:68:87:9c:24:b5:3f:56:24:fa:cf:
f7:66:9c:e4:1e:3c:ff:78:04:ca:0c:9e:9d:72:5f:
a3:ff:45:cd:27:ea:79:67:f4:5b:bd:39:85:46:2f:
34:c3:be:ef:65:ae:34:d2:e4:f7:8e:fa:54:b5:a7:
21:a5:f2:f7:20:0b:c6:7f:3e:42:70:0d:83:bf:62:
32:f1:dc:9f:6a:75:08:55:3f:a3:29:ca:07:a5:3c:
c9:ab:dc:14:65:7f:2a:50:bf:af:99:1a:f6:a9:aa:
b4:f0:80:de:0c:48:05:28:eb:98:d2:64:e8:b6:ac:
9f:55:07:4d:c7:48:96:01:48:11:76:5e:b9:44:24:
50:fd:d0:11:c0:5d:30:69:0d:37:49:c9:ad:6b:88:
9c:e2:35:14:f9:e0:c2:6a:59:0e:7b:88:26:c3:98:
d4:0a:46:c5:01:17:e9:53:f3:fa:40:9d:37:32:f9:
7e:7a:a5:30:38:c8:7b:e2:37:b3:a2:9a:c3:c3:2e:
05:00:ea:9f:7b:b1:a0:02:78:e4:d4:55:85:b1:6a:
27:14:ad:85:69:1f:b9:dc:7f:b4:8f:a3:7a:33:24:
f7:f7:75:27:4d:76:9a:26:cb:65:df:f5:31:0e:a4:
4f:ce:1c:77:02:43:ce:33:86:b6:33:5c:80:58:82:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:A0:35:D2:66:49:9D:2D:A3:F0:9A:1E:3A:B3:55:98:27:CD:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8e53307f-303a-3c66-b97b-67d21496e509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
67.134.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:3d:f2:77:ef:55:fb:a8:2c:d0:9b:6c:7b:5d:71:5d:ef:bd:
25:97:10:d7:b3:7e:34:1e:4a:fd:a0:8d:46:f9:a0:68:8f:09:
d6:c1:72:11:04:08:cc:04:f5:ef:26:80:68:23:ec:f6:98:c3:
74:cb:cd:e3:fa:0b:4b:70:3a:f8:6f:49:5e:cd:8e:3e:e1:23:
f9:d4:43:bf:60:12:1e:7a:12:e1:ce:58:fe:25:87:d4:a9:f5:
03:74:57:bd:1c:53:66:6b:60:05:d7:b4:25:d8:65:da:ee:69:
ba:75:36:81:89:14:cb:44:95:09:b1:6f:6f:21:16:77:76:2e:
30:21:1d:77:28:21:79:76:9c:a3:be:93:dd:57:20:2e:ba:99:
ae:ab:c5:4e:25:fd:a9:08:9b:bb:3e:ba:b4:2e:63:5a:cb:7a:
7e:66:82:42:03:79:e6:3f:2a:45:6f:d4:71:e1:95:dc:cf:98:
a5:d9:fc:2f:78:95:0f:65:f9:f3:ba:34:6b:37:40:4c:1f:36:
2e:42:10:f4:be:28:07:e6:3e:ba:4d:f7:bd:c4:86:8d:3a:b3:
63:ee:1f:38:ab:a6:d2:ef:cd:1d:1a:34:90:b0:59:8f:2c:02:
60:f2:3d:67:f6:2b:93:18:a6:d9:44:34:ce:6e:14:f2:c3:9f:
5f:ac:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:42 2025 by rpki-client on console.sobornost.net