Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/7b02e9a2-de73-3a72-aa86-9e63f17a36cc.roa
File: 7b02e9a2-de73-3a72-aa86-9e63f17a36cc.roa (raw, json)
Hash identifier: mLhM0cQG6yopHymtPPkyM94FtpVo5lh5so1KozvIZ+s=
Subject key identifier: 3D:55:8A:2A:90:CF:CC:5E:0C:1F:73:41:5A:E8:A8:FD:BB:D7:F9:DC
Certificate issuer: /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Certificate serial: 010D0C9F43285849648440F8EB8156FFC1655220
Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/7b02e9a2-de73-3a72-aa86-9e63f17a36cc.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 16509
IP address blocks: 64.57.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:40:f8:eb:81:56:ff:c1:65:52:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=8bb57bbb-1c24-48b7-ba1b-306c443821c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:a8:a6:f9:c3:65:93:ee:61:e9:54:1d:be:
04:51:15:a4:08:6a:a1:d6:41:1e:3a:2e:32:20:3d:
17:8c:ff:0b:54:a1:fe:56:95:a4:05:34:29:50:43:
ec:1a:a6:c0:a2:b3:28:b5:42:7e:df:2a:ab:d8:09:
79:03:31:c6:6a:b7:d0:dc:a3:ef:9c:71:d0:80:76:
00:dd:c2:3d:05:96:b9:73:b8:da:c8:41:1b:70:d7:
b1:6b:fc:38:9e:dd:1e:48:0d:2e:33:bd:17:d0:dd:
0b:a4:82:fa:ec:26:35:e7:9d:cc:a9:38:81:6f:e8:
68:82:dc:a2:ac:2c:9e:d4:7e:d0:72:07:62:ca:41:
70:a6:5c:fb:58:cc:35:fa:26:75:05:bc:c4:68:56:
a0:e2:4d:f8:b2:da:1a:bc:48:a0:c3:86:7f:8b:de:
18:fe:78:58:d1:d9:b0:fb:02:97:1f:90:d4:8e:7d:
87:4d:13:ce:51:9f:d2:a2:af:b4:28:6d:e4:aa:42:
cf:fe:2a:58:c2:b6:00:42:17:91:68:69:fa:fa:33:
99:f2:54:62:f1:fd:f5:df:82:3d:22:52:f0:73:30:
6d:de:71:ff:13:d2:16:8f:91:6c:2c:cb:08:37:25:
d0:d1:60:a7:83:2c:4d:41:73:2e:ce:eb:92:28:e0:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:8A:2A:90:CF:CC:5E:0C:1F:73:41:5A:E8:A8:FD:BB:D7:F9:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/7b02e9a2-de73-3a72-aa86-9e63f17a36cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl
X509v3 Authority Key Identifier:
keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.57.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:6d:70:93:bb:6f:f8:1c:d3:1d:5c:60:43:f7:70:53:99:56:
02:c4:af:9a:bf:f6:49:2f:de:d8:39:3d:58:92:6c:26:3e:a9:
cc:90:ee:4b:da:ed:e9:56:9e:9c:51:9f:9c:1b:36:e8:e3:a0:
27:4e:32:a7:c0:9f:1d:c6:18:61:76:87:50:82:ed:8c:20:2c:
9e:b2:87:87:d9:b9:7c:55:f4:88:13:61:3b:f4:99:f5:72:7c:
a4:a7:a2:75:6a:88:c1:b6:4d:93:27:dd:7c:9e:9e:56:6d:c4:
3f:02:74:34:42:11:12:95:bc:ab:82:13:22:1b:23:e4:e4:1a:
7d:d7:3a:ce:f9:e4:17:94:4f:54:b2:0e:8b:ef:f7:dc:d4:96:
d4:43:9a:e6:c5:20:3e:fb:9d:ce:ef:7b:7f:90:16:04:9a:f4:
e4:9c:97:74:bf:ea:96:6c:62:01:63:9d:66:74:e1:e1:10:d8:
fe:5f:13:5a:a6:7e:bc:bd:76:5b:44:07:a5:74:4e:f9:ac:a0:
dc:c6:8b:83:17:0c:3f:99:48:61:8f:3f:7a:bc:de:96:8b:b9:
a0:84:c4:40:79:55:34:50:6a:ee:97:5c:84:9a:ea:cf:3b:06:
fd:e5:c4:f8:a2:0f:c2:cb:d0:19:03:96:90:e5:70:5e:2c:c1:
bc:70:13:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:22 2025 by rpki-client on console.sobornost.net