Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/20407699-399d-3a34-9a0a-cccc3acac035.roa
File: 20407699-399d-3a34-9a0a-cccc3acac035.roa (raw, json)
Hash identifier: 4OuMZ41flBv7llFd2voqngsYDmpiYqeMNzYfTrtl3Xs=
Subject key identifier: 64:51:84:2C:C1:DB:58:38:CA:8B:91:EC:BF:70:3D:A3:07:3E:68:AB
Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial: 010D0C9F4328584975444E4E474C161FA2B043F0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/20407699-399d-3a34-9a0a-cccc3acac035.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 25804
IP address blocks: 208.69.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:4e:4e:47:4c:16:1f:a2:b0:43:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=68f1171d-3c61-4d87-9366-afa06b94c095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:b0:e1:1c:ec:1e:2c:ec:7d:8f:a8:91:15:
c1:20:85:46:d0:37:19:76:a2:7e:ac:58:d9:ad:1d:
af:31:c6:83:1a:5d:d4:26:5f:4e:42:c6:d4:a0:6e:
bd:3b:a3:f2:32:6a:51:15:ad:ca:d2:b8:de:68:f1:
d8:64:df:8e:be:2d:57:26:7d:06:a9:e8:1a:d5:b9:
44:73:51:81:00:79:24:4a:10:8c:c2:63:fc:fb:dd:
6e:75:e2:c0:45:3f:7e:e0:22:d2:f0:da:25:52:1b:
60:43:f1:fa:33:4d:c8:23:fa:48:f5:c5:e1:55:a9:
60:ec:a7:f7:cb:41:2e:25:dc:6b:ab:0d:23:9b:bb:
37:f0:41:d2:ab:57:a7:74:bc:ed:2d:da:d9:36:73:
b9:90:b9:05:7f:93:28:a4:9c:72:01:8f:34:d3:2b:
04:4f:64:a4:88:7b:cd:63:ee:91:56:c0:9f:9d:12:
56:0d:92:1f:df:d4:4d:00:ca:c4:6d:32:ea:e3:44:
f4:ca:bd:16:1f:5a:62:79:ee:ba:ca:fd:12:54:3d:
76:85:cd:5d:95:76:ce:09:39:41:81:4b:a1:e4:5e:
4e:64:06:77:38:c9:13:cd:2f:23:6d:e1:ca:a0:3c:
ef:c1:c3:c4:6c:5f:c5:0e:dd:47:33:9b:1f:ad:26:
0d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:51:84:2C:C1:DB:58:38:CA:8B:91:EC:BF:70:3D:A3:07:3E:68:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/20407699-399d-3a34-9a0a-cccc3acac035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
X509v3 Authority Key Identifier:
keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.69.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:11:d9:a9:9e:a6:52:b3:44:a9:de:ab:ec:2f:cd:0c:0f:84:
f3:e2:0e:6c:2b:b7:6f:ad:e0:9b:35:2d:36:b3:7c:16:f7:a5:
25:83:31:5d:b6:4a:c9:10:9d:0a:28:38:51:bf:82:fe:ab:5d:
bb:2e:8b:9f:b5:2c:97:d5:51:02:91:6d:01:e7:10:ce:f9:52:
fc:1c:f8:47:0f:b3:c7:59:87:27:18:ab:a2:45:ad:17:0a:89:
70:bb:97:dc:f4:72:04:8f:b4:38:01:33:6c:84:db:f0:ba:d4:
33:b4:11:9e:0a:98:38:c6:7e:38:76:54:2d:5a:61:2a:ea:c6:
04:c3:39:42:6e:3d:5d:ff:2f:2b:f4:b4:2a:37:4c:77:c1:d2:
48:7d:42:01:8c:7a:1f:91:17:90:bd:16:79:c3:3c:9c:65:6d:
ad:1d:f0:50:1a:6c:2b:40:2a:e3:c7:48:9a:16:36:ee:98:df:
6b:5e:f0:58:60:47:26:24:f1:43:12:cd:81:63:5b:dd:99:25:
ad:17:fb:21:e9:ca:99:ad:d8:95:ee:24:dc:bf:ab:fd:e7:70:
bd:f1:4e:b7:f0:3b:b9:2b:aa:1e:d8:4e:d1:43:e2:3a:79:a9:
6c:ed:d1:55:88:8c:3e:2e:32:18:6f:d4:d9:51:ab:d4:c5:2a:
a3:55:d0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:25 2025 by rpki-client on console.sobornost.net