Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa
File: aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa (raw, json)
Hash identifier: ZI9dzxbQOsLgPXiFlGBTLFpvxF8XXpmHOmbtWqA3N/8=
Subject key identifier: BB:5D:0E:F9:48:B5:23:98:B2:C2:47:B5:33:32:B9:0F:4F:28:2C:77
Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial: 010D0C9F43285849393E74A87EFE54D8A9821C00
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 14618
IP address blocks: 72.18.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:74:a8:7e:fe:54:d8:a9:82:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=251cc990-d620-4418-a144-318d082bdbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:83:1b:c8:dd:01:81:94:4b:0b:04:b2:1f:4c:
b0:c8:76:97:4e:68:f8:0a:47:48:dc:8a:fc:ff:0f:
ac:05:e5:81:f3:8e:33:9e:42:4b:54:8f:c7:05:62:
ff:d2:a2:fa:91:ae:47:53:03:24:7f:8a:f0:ed:12:
f8:c4:49:dc:6c:5e:c3:a4:97:9d:23:66:e7:8f:cc:
35:9b:bb:06:68:97:53:4f:e8:52:e5:0d:a6:b8:5d:
23:3c:01:c5:e2:d1:ed:8b:54:ad:62:d0:96:6e:39:
b4:c3:15:39:68:24:75:01:75:41:5e:c6:e4:23:71:
80:ee:35:b3:8e:90:36:94:d8:35:7f:19:ef:f7:be:
2e:8d:58:e0:5c:cb:4b:82:54:12:52:10:1e:9a:d3:
95:72:2f:11:f3:50:be:e2:d8:75:60:a4:ea:b7:16:
1c:4e:6a:27:d8:9b:a5:8c:0e:be:d1:5f:db:17:61:
1f:25:a2:6d:97:e5:b5:dc:4b:50:4f:2d:df:9d:91:
fa:12:fe:a5:ee:c5:7c:53:fb:45:8c:5a:ea:a6:57:
a0:c4:9c:08:ce:14:be:04:7f:ad:97:c7:91:86:56:
5f:a7:f1:23:1f:dc:96:c8:9b:83:bf:7a:b9:dd:83:
6b:ff:cb:96:c8:01:04:60:74:78:48:04:77:b4:b9:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5D:0E:F9:48:B5:23:98:B2:C2:47:B5:33:32:B9:0F:4F:28:2C:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
X509v3 Authority Key Identifier:
keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:34:2e:2d:2f:56:0f:4b:c4:04:bb:2d:20:54:5e:8b:56:2a:
7d:6f:3b:d0:1d:97:bb:63:4a:44:fe:ac:eb:03:c2:b6:8f:12:
93:1d:79:b2:a8:fe:ef:4b:5d:d6:db:cd:d3:51:cf:79:e7:33:
b6:76:74:8d:f8:cc:25:8b:e9:8f:d5:e9:12:16:20:e0:3c:5f:
5d:84:b6:44:fe:59:ab:75:19:5f:ed:d3:b5:ba:c3:5a:ce:5e:
a6:22:8c:d6:a3:f2:61:04:07:00:71:3f:49:9f:17:7b:3e:78:
e3:f3:ab:ce:e0:54:ae:89:41:2e:f3:85:21:db:2c:d1:17:09:
29:7c:79:25:49:24:84:86:6b:24:bf:ee:dd:a0:34:bb:e5:9d:
ad:59:95:1f:8e:be:22:60:76:75:c6:60:b3:e4:e0:68:96:19:
dc:ee:fa:25:b6:1d:90:df:e7:2d:a3:3c:51:55:19:5a:cc:63:
af:ca:6c:34:1d:5a:aa:04:f8:d7:64:4c:02:cc:00:7c:25:5e:
96:4f:bd:77:23:c8:64:1a:a6:5a:45:c6:7f:4c:fb:45:c6:f6:
97:0f:2b:b5:34:48:bf:44:c2:40:76:70:70:d0:d8:16:34:cb:
15:f0:74:25:ad:95:f9:3b:c8:7d:83:18:85:cc:80:69:92:75:
35:4b:82:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:54 2025 by rpki-client on console.sobornost.net