Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa
File: ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa (raw, json)
Hash identifier: JvtQIQy9A1odLWQAy7ZTZbirm77NqE0RkE8+BPb7Ttg=
Subject key identifier: 16:2B:17:45:60:C4:6F:24:CD:2E:4C:5E:F9:72:59:BB:32:C5:A8:63
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584944692F5E7FA3E440A5B22DAE
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 14061
IP address blocks: 134.199.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:2f:5e:7f:a3:e4:40:a5:b2:2d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=5fc06ed4-d13a-4353-ae34-ec269a522193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:84:14:dd:5b:c6:4d:74:17:c0:8f:17:ad:
c7:86:8c:6b:c9:85:f5:9f:e6:22:94:e7:cb:33:af:
54:8d:e2:2a:0f:71:38:a5:bc:a8:58:65:97:3a:ae:
44:a6:0f:86:4c:1f:dd:ca:81:96:25:d7:b7:c6:c3:
21:81:8f:1a:86:c6:13:68:1c:cd:18:0b:2b:64:5c:
c6:a0:d9:b0:19:78:43:04:f3:6a:f4:21:66:50:1f:
c2:12:e0:3f:cc:29:02:bb:c0:30:ca:6f:3c:41:85:
6f:c6:52:d9:e7:75:02:b0:ce:23:c9:68:a1:c2:91:
da:10:b4:5e:15:72:82:da:66:ff:6b:81:d6:ae:78:
c1:71:f4:c7:f4:9c:32:12:9b:ea:6a:c0:d2:bb:89:
25:fe:97:7f:7e:6e:6d:dd:6a:00:ca:7d:74:d6:14:
b7:0e:a1:2c:47:8b:f3:b6:45:f3:d4:9b:89:24:de:
18:a5:eb:69:49:a7:ff:5f:a1:2f:e3:2d:6f:48:c8:
b5:53:61:53:b6:0e:24:34:01:ce:b2:bf:1b:ca:bd:
92:20:6f:fb:55:0e:40:1e:df:80:82:19:1e:19:d9:
63:3d:b1:d0:bb:a4:3c:8d:25:77:73:c3:41:e8:89:
2a:7c:27:ef:c1:49:98:d1:a9:9e:c4:f7:c1:cc:91:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:17:45:60:C4:6F:24:CD:2E:4C:5E:F9:72:59:BB:32:C5:A8:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
134.199.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:75:b3:9d:bb:6a:9e:f0:87:e9:63:c8:0b:13:c3:39:5c:eb:
64:e7:98:5d:ce:bc:ce:e6:33:ec:c9:92:35:aa:6a:9c:3b:68:
41:66:ad:ed:d4:c6:b5:d7:9e:56:a7:91:7e:f5:69:28:d6:da:
86:f6:c0:e1:a8:e3:ec:73:9b:f1:2b:08:94:e1:cc:12:8b:78:
98:dc:c0:95:8f:4a:6e:b7:31:b9:c2:b0:7d:62:79:35:1d:a9:
2c:c2:5d:27:19:98:5c:22:b9:a3:45:22:00:d4:64:d3:0b:c1:
8f:df:ce:80:7b:54:0d:63:7d:5b:41:ae:c4:bc:d8:be:4b:e4:
cc:ae:63:26:00:22:ee:b7:ba:b6:63:ea:8b:c8:39:e5:45:da:
fa:39:fe:17:ea:38:17:79:f9:aa:3a:5a:7e:7e:f2:da:4d:a4:
1f:dd:61:98:38:46:7c:98:0a:06:20:e7:87:2b:50:dc:c3:28:
70:57:a2:40:12:0f:e8:b0:ae:2b:6e:12:36:07:15:bc:e5:c6:
d9:a8:a0:82:14:39:bf:13:ad:87:82:8d:68:ab:87:b3:4c:47:
e5:ed:a6:f6:f9:a1:a5:9c:78:2c:c6:07:3d:02:00:38:a9:65:
a9:ef:9d:97:18:b5:5d:79:ad:49:97:85:17:f7:ed:7b:1d:ba:
fd:71:29:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:43 2025 by rpki-client on console.sobornost.net