Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f44a5685-6251-3800-89b9-4dbe41c0bf52.roa
File: f44a5685-6251-3800-89b9-4dbe41c0bf52.roa (raw, json)
Hash identifier: d8f3THdlBUKZOIjD21oB3j3noYxRbcFm37d/l8egXeI=
Subject key identifier: BB:56:75:3B:4B:C8:F6:6A:23:20:38:B7:A3:8D:82:35:CC:2D:B2:F6
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848EF61474F9469DD2FA23B37E0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f44a5685-6251-3800-89b9-4dbe41c0bf52.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 67.221.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:47:4f:94:69:dd:2f:a2:3b:37:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=36d9224a-f87c-4b40-9334-991362c42c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:7b:60:bd:60:09:3e:20:e4:79:f2:e2:b5:
b0:09:99:30:04:48:20:d8:77:c4:d3:22:10:5b:a2:
2c:e9:d5:b1:5e:d0:d9:61:cd:f8:df:50:b4:8f:d6:
e2:31:f0:81:49:8d:ca:87:6d:ce:85:8a:e6:9b:fd:
f5:d3:ef:da:06:b2:d7:49:80:a7:71:bf:d1:03:72:
75:f2:89:01:f6:71:9e:3e:75:79:52:9e:f0:db:0b:
29:53:20:46:db:a5:e4:dd:11:00:95:2a:5d:9d:07:
ad:d6:3d:4d:7d:8a:8c:d6:ae:92:0e:42:0c:36:5f:
05:e7:2e:46:0f:67:4f:13:7e:c6:10:fd:d0:77:c6:
77:fd:85:e5:ee:a1:27:fc:99:cc:82:60:4f:ec:38:
61:56:3f:f8:e6:7c:72:15:9a:a3:97:07:15:2e:07:
3f:18:98:0a:6c:6e:07:5a:ea:09:b6:b7:ae:77:b7:
8d:32:82:01:85:01:2b:c9:10:39:dd:2e:30:25:d4:
99:e3:42:f4:c3:b3:c7:e2:1b:d7:d7:5f:c3:53:5d:
e6:ae:d8:4b:e4:b4:52:35:65:cb:97:f6:ff:70:41:
16:54:03:45:5a:f8:20:6b:0d:65:7c:32:d1:52:be:
0c:e1:fb:d6:a0:3d:4c:1f:09:43:d2:56:e5:72:7d:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:56:75:3B:4B:C8:F6:6A:23:20:38:B7:A3:8D:82:35:CC:2D:B2:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f44a5685-6251-3800-89b9-4dbe41c0bf52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:05:62:35:5b:a8:8e:06:bc:5d:88:33:24:c8:dc:bc:33:5d:
73:dd:87:3b:8f:ab:21:47:32:c5:ff:d9:5f:88:c3:71:c3:ae:
ef:ec:26:24:d7:8a:6f:43:2c:9a:ac:18:8f:46:2d:ff:35:dc:
bd:12:74:53:e7:9a:11:9c:02:40:aa:5d:56:5f:5b:c9:16:76:
c6:a0:4c:3d:fe:47:1c:c8:1d:79:be:79:42:ef:da:db:18:ec:
83:8c:2d:c5:28:92:37:62:11:97:76:1e:27:54:e5:1a:97:4b:
15:74:22:ed:9b:94:78:2e:87:ed:ce:ab:89:70:55:ef:ee:1d:
e9:73:b5:2e:0b:52:f8:c0:58:7a:a1:c2:91:61:14:1b:88:7d:
b8:f3:f0:e4:78:4c:4c:b4:b5:b4:b9:bb:89:86:6c:ff:7e:ef:
13:57:7c:e2:c5:c9:4a:87:ca:13:76:3c:10:42:31:80:fc:e1:
be:ef:77:ad:8b:5b:eb:0c:c2:d8:15:12:09:63:55:59:ef:c4:
cf:f5:92:70:0b:81:0a:b1:af:69:89:bb:dd:86:c6:46:5d:72:
c7:c2:b9:a3:c9:fd:f2:de:b4:8e:40:ee:15:28:2f:d2:ae:c8:
82:ed:16:3f:2a:58:41:cf:3f:ce:7f:c1:b1:63:b2:eb:1c:ff:
5a:f9:d0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:33 2025 by rpki-client on console.sobornost.net