Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa
File: f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa (raw, json)
Hash identifier: MBFtb2QbUQn3eF+sPxGLC3gg/TrF9NF0HZWmx6QFXK4=
Subject key identifier: 37:CA:55:67:90:15:3A:49:4E:60:53:EE:F0:4F:0E:69:1E:7E:21:E7
Certificate issuer: /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
Certificate serial: 010D0C9F43285849623393C15316A4DDA0DF91C8
Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa
Signing time: Tue 01 Apr 2025 17:06:58 +0000
ROA not before: Tue 01 Apr 2025 17:06:58 +0000
ROA not after: Mon 30 Jun 2025 17:06:58 +0000
asID: 20259
IP address blocks: 208.82.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:62:33:93:c1:53:16:a4:dd:a0:df:91:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
Validity
Not Before: Apr 1 17:06:58 2025 GMT
Not After : Jun 30 17:06:58 2025 GMT
Subject: CN=cc1cdee8-6374-4788-8802-713bd19155cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:bb:b6:5f:38:07:1f:c1:e3:8a:5c:fd:c2:
33:97:8e:14:bd:9e:b9:62:b2:03:1f:d6:a9:51:bc:
14:bd:fe:fd:3d:79:86:d3:bf:17:4d:bb:9f:97:db:
6a:8f:c1:c3:16:0a:94:37:a9:4c:9c:f9:53:47:d7:
68:e2:d3:dd:07:97:99:60:ce:aa:4f:98:c7:27:f1:
ad:eb:f4:14:98:ee:95:31:e4:ed:b8:63:4f:07:bd:
43:db:b3:3f:94:0d:d3:b3:26:cf:bb:55:73:24:0e:
07:25:fa:83:2f:64:1d:dd:1b:18:ac:ec:e2:c2:6a:
49:14:19:d7:cc:89:bd:c4:0e:e1:75:47:a5:21:db:
2d:4b:3f:38:28:e3:68:7d:09:22:b3:a2:3e:dd:cb:
04:70:51:c3:40:5e:12:ee:1f:a1:0e:3d:33:47:a8:
ec:43:87:bc:61:57:64:e7:bb:1d:84:6f:52:e6:5f:
2d:ff:16:c3:3e:1a:0e:6d:2a:00:e2:7c:fe:d9:61:
3d:98:30:c1:cd:7e:c8:a6:6f:f2:f2:f3:69:be:55:
85:d4:a4:49:d5:13:9b:73:94:a0:4b:82:29:06:f1:
43:fc:0a:fe:44:fa:3d:1f:33:29:1d:98:df:f3:86:
c4:56:f4:35:c4:da:72:b0:1e:3b:5e:71:44:29:93:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CA:55:67:90:15:3A:49:4E:60:53:EE:F0:4F:0E:69:1E:7E:21:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl
X509v3 Authority Key Identifier:
keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.82.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:c2:21:60:b3:02:40:10:61:62:04:65:d8:ec:fc:c1:6c:d0:
d5:dc:87:90:83:b7:ca:9f:eb:f1:56:ed:f4:2c:71:4f:53:ab:
80:d4:a5:66:96:93:f4:59:88:aa:d4:30:89:66:e9:b4:20:3b:
55:9b:7b:c2:1c:9b:d9:8a:0b:69:b3:ca:38:1b:6e:03:1f:80:
1d:de:d8:4d:29:fe:38:bf:fc:ea:d1:f8:a3:fd:01:8b:03:d9:
b7:fa:f9:62:eb:83:f4:0e:2c:ad:04:ed:5d:9a:37:db:be:ee:
2e:98:7d:a0:03:69:b2:13:d4:02:8c:1c:41:c9:af:26:5d:f8:
54:a4:a9:01:a8:19:a3:d2:91:f5:ea:87:e2:9f:7a:d4:21:c3:
83:cd:ee:d7:67:d1:44:08:db:d5:18:05:8f:24:75:1a:5d:ed:
f2:6d:19:5b:60:d8:04:9a:32:59:7c:29:17:5b:91:e3:ff:5a:
0a:42:14:de:99:e0:c2:c2:9e:92:7c:ff:4d:8a:36:15:81:70:
e6:bc:5a:c3:58:7f:cc:22:10:5e:41:7e:91:95:b7:64:7c:65:
c6:06:70:b4:ae:95:5d:f5:cc:af:4e:a8:05:47:3e:a4:6d:bb:
f9:23:ae:aa:bf:89:96:3f:9a:1d:3f:da:69:35:07:ea:b1:9c:
ca:b2:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:08 2025 by rpki-client on console.sobornost.net