Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a99233be-1207-3ee2-bad9-d47dffd5091c.roa
File: a99233be-1207-3ee2-bad9-d47dffd5091c.roa (raw, json)
Hash identifier: DOjeorN1rP4TXa0HTNuxJf6lae/JG7Mqjj11oIfgLas=
Subject key identifier: 2D:96:B0:22:B1:5B:25:1C:CA:98:99:3D:6D:20:E0:C7:30:E2:DA:0E
Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial: 010D0C9F432858495EEED4ED15380C9BA15C4EA0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a99233be-1207-3ee2-bad9-d47dffd5091c.roa
Signing time: Mon 31 Mar 2025 13:00:59 +0000
ROA not before: Mon 31 Mar 2025 13:00:59 +0000
ROA not after: Sun 29 Jun 2025 13:00:59 +0000
asID: 1288
IP address blocks: 2620:171:a5::/48 maxlen: 48
2620:171:a6::/47 maxlen: 48
2620:171:a8::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:ee:d4:ed:15:38:0c:9b:a1:5c:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
Validity
Not Before: Mar 31 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=9395a115-17fd-41a5-97c6-09ef55faed19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:91:79:5c:29:84:03:bb:74:7d:fe:9f:55:
2d:17:bf:a8:fd:0e:4a:bc:f1:09:84:05:f9:8c:e9:
3f:dd:61:00:4a:c5:9d:f2:ed:b4:94:c0:0c:b4:cd:
5d:38:74:9c:6d:fd:f5:4a:67:e3:b9:59:94:e6:d7:
88:35:43:22:74:87:7a:00:93:0e:72:f2:90:56:90:
16:54:eb:ff:0c:55:2f:4b:d2:24:f6:fb:9e:60:0b:
0e:46:3e:22:c6:0f:25:b7:2a:ff:f6:cb:b4:ce:04:
97:47:72:bf:9b:73:83:08:0c:b8:8d:c8:1c:ac:d7:
4d:45:ea:50:4c:1e:c9:6e:45:8d:ba:be:60:cf:65:
2f:cb:8c:f7:2e:95:1c:8b:8c:cc:da:2d:bf:b7:f9:
bf:0f:dd:8e:81:a9:8f:79:dd:26:73:2f:3c:97:46:
f0:6e:f2:57:12:38:a9:ef:07:20:3a:c6:ea:c4:d4:
1e:7b:68:df:30:bc:dc:37:fc:3f:c7:c1:1b:ee:75:
66:98:0c:46:2d:5d:8e:fe:12:26:a6:10:57:5f:3c:
ea:4f:07:88:8b:69:84:16:69:a7:11:9f:1b:c2:b0:
86:cf:f8:8c:c7:e5:78:5c:1c:e5:d7:03:3c:86:69:
8b:7b:fe:12:50:dd:f0:de:e1:bf:67:ea:ca:b6:c3:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:96:B0:22:B1:5B:25:1C:CA:98:99:3D:6D:20:E0:C7:30:E2:DA:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a99233be-1207-3ee2-bad9-d47dffd5091c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
X509v3 Authority Key Identifier:
keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:171:a5::-2620:171:a9:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:40:d2:80:bf:36:ad:84:5d:31:90:18:fc:b7:8d:92:10:cb:
ce:99:d5:b7:f5:2a:8d:38:43:c7:fc:b6:ee:3a:3b:47:f5:c7:
d1:e1:af:d2:e4:39:70:96:6f:42:94:98:c1:95:d9:c3:4e:c7:
8b:9c:15:43:37:b0:cf:80:c8:3c:e7:dc:5c:59:1d:89:39:3f:
78:f1:d2:12:e7:44:96:a0:f9:cb:27:2e:c7:75:ad:39:f0:ac:
39:74:0a:f0:c2:7c:15:fa:f9:0c:f3:d2:77:c0:ec:e8:44:32:
ad:a6:b6:04:b3:91:b2:7c:4a:9b:04:cf:53:f4:ad:88:03:11:
a8:e1:8b:d6:35:2c:c1:8c:31:01:dd:b2:b8:b0:e0:e1:e9:10:
0e:04:e0:ca:c2:62:ab:1e:ed:4b:98:5f:5f:0f:c7:16:3b:f4:
78:47:7f:90:94:89:86:41:a1:ef:6d:34:2c:f2:aa:3b:a8:09:
35:f0:f7:2b:81:a4:90:07:08:67:e2:a9:86:85:96:b3:a7:7b:
c4:74:1c:24:53:33:8c:2c:32:b9:df:b8:18:6b:6f:42:7e:64:
8b:1e:2f:3b:15:e6:e9:4a:b9:61:ad:24:6c:08:e1:ea:3b:d7:
00:26:bf:f8:5f:07:83:81:75:1f:80:6f:ce:6c:ad:a6:a3:fe:
9c:d5:a2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:49 2025 by rpki-client on console.sobornost.net