
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/282703f4-37f5-3c17-a75e-bd03d598e247.roa
File: 282703f4-37f5-3c17-a75e-bd03d598e247.roa (raw, json)
Hash identifier: Ev4aJqqOi4eUIbIuo6pcWgvyCpuGQ6z1vzPs0BDIh9U=
Subject key identifier: 61:00:4B:30:1B:BB:55:E9:11:3E:C9:06:1C:FC:83:A0:D5:D3:AA:1C
Certificate issuer: /CN=f96100a5-de6f-4e8d-a5f0-be83c31160b7
Certificate serial: 010D0C9F4328584964843D067279C17A32250A40
Authority key identifier: 25:69:20:E8:51:C5:35:97:63:A8:84:11:F4:FA:E7:7F:39:AE:58:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/282703f4-37f5-3c17-a75e-bd03d598e247.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 13768
IP address blocks: 66.129.176.0/20 maxlen: 20
67.226.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:3d:06:72:79:c1:7a:32:25:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96100a5-de6f-4e8d-a5f0-be83c31160b7
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=bae90723-c2eb-4488-8f35-ba02955a51b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:47:7f:10:ef:25:bf:53:62:13:4e:f8:47:
91:8c:6c:89:42:a4:93:62:a2:d5:e1:ef:d1:f1:e9:
c7:5a:29:cc:7c:9a:20:d0:ea:57:e9:fc:1d:e7:f4:
08:01:ac:f7:90:3e:bb:f4:1b:29:06:16:82:f0:84:
e3:38:d7:59:01:48:20:df:57:ac:7d:78:8f:1b:08:
f0:d2:08:74:7a:5d:88:d1:7b:bc:0b:a2:0a:ce:3a:
fd:39:2d:b8:4a:95:44:db:94:5f:20:3a:29:37:c1:
e1:71:20:55:06:51:15:fd:a9:69:f2:81:12:17:21:
ed:58:39:a4:99:4b:6f:18:24:92:76:f1:8e:8d:86:
ba:d7:54:e1:0e:08:63:99:f6:fc:57:48:48:d2:fa:
57:b9:a8:51:9b:f3:a8:54:b5:de:77:3b:b3:24:2e:
2a:47:b0:a4:75:64:1b:1b:d9:ac:47:b1:0b:f2:da:
a7:b4:7b:f2:a8:14:32:45:b4:ef:5e:83:2e:1d:ea:
a0:18:e6:f3:8c:e6:9d:5c:07:d9:d3:ac:eb:56:4c:
6a:e1:92:35:5c:e0:f1:fc:57:10:b6:08:49:15:a3:
e1:87:a4:80:91:96:e4:7a:65:1a:50:ac:2d:e2:c0:
90:de:26:8d:ea:3e:cd:84:a2:e4:cb:fc:26:86:1d:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:00:4B:30:1B:BB:55:E9:11:3E:C9:06:1C:FC:83:A0:D5:D3:AA:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/282703f4-37f5-3c17-a75e-bd03d598e247.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.crl
X509v3 Authority Key Identifier:
keyid:25:69:20:E8:51:C5:35:97:63:A8:84:11:F4:FA:E7:7F:39:AE:58:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.129.176.0/20
67.226.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:70:db:e0:9b:09:81:76:d2:be:30:4d:be:ed:5b:ae:f6:76:
e1:e3:a8:58:d3:c7:52:ff:7a:57:86:cc:86:9c:68:fc:11:3d:
eb:69:90:14:e6:4d:e2:d5:53:17:75:1f:fb:d6:f2:8b:15:24:
fc:bf:b3:af:fd:e5:c3:42:7c:ae:dc:8b:a0:7f:97:d4:7e:20:
67:6f:6b:ce:4c:c8:49:0b:84:8b:7b:03:f5:cf:c6:c2:9e:f7:
ba:4f:5f:0a:3e:9a:05:5a:13:1f:e7:6f:a3:af:eb:91:2f:55:
d4:71:0a:d2:e9:89:09:27:99:06:7e:ff:7d:b4:31:d3:10:17:
34:c9:ef:43:b0:b9:9b:e4:5a:a9:0a:56:1b:ce:72:4c:80:9d:
88:e8:fc:e9:60:a7:92:36:0c:98:aa:20:db:f2:f8:14:73:16:
fe:70:ab:3b:ee:94:2d:90:ce:4d:2f:ad:58:50:6c:74:b7:de:
a9:7b:c8:37:b4:4d:4e:e8:15:b2:b9:e9:06:48:87:27:db:ba:
f4:37:16:b2:f3:4b:bb:18:e6:f4:78:03:5e:5d:b6:1c:cc:32:
a4:a9:0a:11:1d:e3:65:4d:8d:dd:88:6d:1a:44:1a:f7:4d:96:
08:58:e6:d7:86:0a:b3:31:52:53:91:c8:de:f9:f4:ee:c6:bb:
5d:f7:31:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:22 2025 by rpki-client on console.sobornost.net