Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa
File: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (raw, json)
Hash identifier: uUovSan9qxg4hiGxUFkidBlN0HmJ5aopvx3QrmVVWpc=
Subject key identifier: 59:F6:FD:76:AC:BE:61:09:53:DE:72:75:3D:7E:3E:D4:DB:21:CC:81
Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494
Certificate serial: 010D0C9F432858496FAF08C8EA1EA5C9A57BD940
Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 40867
IP address blocks: 74.114.72.0/21 maxlen: 21
172.86.240.0/21 maxlen: 21
208.90.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:08:c8:ea:1e:a5:c9:a5:7b:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=fb64ea1c-de8e-4544-87d2-4f248450fdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:2a:d1:84:da:77:48:ea:2e:46:59:d8:e1:
c8:19:70:ca:48:fb:c6:b4:05:a5:64:dd:df:e2:d5:
7e:66:ae:4a:8c:23:ec:ac:80:ab:af:b1:00:b8:db:
e5:e6:24:63:a6:51:2e:36:b8:43:d4:e3:d1:d6:33:
ea:07:62:47:f7:e3:fe:ff:51:4b:e8:0c:39:34:f3:
ac:83:c8:9d:b8:c1:dd:a4:65:dc:94:f9:97:4c:24:
f4:7e:ea:69:73:83:db:4c:c4:7b:da:cb:16:dd:06:
d2:04:73:8a:6c:11:13:8d:d7:84:9d:ff:c4:47:6a:
f2:16:73:be:98:5a:0c:70:b5:6a:53:02:26:06:74:
7b:ca:7f:9d:cc:5c:4a:51:3e:98:51:6f:82:4e:fa:
7a:f2:d1:b9:cd:95:df:a8:b6:51:6e:65:1d:76:5e:
0f:f3:9f:77:d2:76:b7:2f:81:47:74:06:73:c0:bf:
87:6e:1c:32:41:d2:19:08:f0:bc:07:05:4c:ad:96:
de:f9:f2:66:3d:84:9e:38:c3:c7:2c:4d:31:ac:7c:
08:60:33:99:eb:6c:88:a0:96:6a:97:b7:39:76:d2:
fa:49:2b:34:99:3e:2b:b9:e4:2b:f1:67:00:3b:c6:
b4:4c:1b:a2:7c:c8:83:09:c3:76:e9:e5:ac:0e:f9:
d8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:FD:76:AC:BE:61:09:53:DE:72:75:3D:7E:3E:D4:DB:21:CC:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl
X509v3 Authority Key Identifier:
keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.72.0/21
172.86.240.0/21
208.90.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:0a:d2:9e:5d:54:b6:61:14:5c:fb:5c:12:d3:e9:23:97:da:
e8:66:32:83:6b:03:ec:7b:ad:fc:21:14:11:f2:bd:65:be:4a:
76:da:7c:6a:77:05:ab:89:9c:fc:7a:36:fd:71:9e:5d:77:e6:
4e:bd:1c:a9:08:ad:9f:1e:44:83:ed:f4:09:9c:83:9d:6c:3c:
eb:c8:ac:54:d8:85:c9:bf:fe:a1:35:16:a6:fc:1a:c1:7a:c0:
67:b3:f4:42:a8:44:bc:5e:94:00:f2:de:03:63:84:ce:aa:8d:
02:d6:28:8f:55:86:33:0c:18:df:d5:33:96:48:c9:1f:92:7d:
c7:c7:2b:71:ce:81:e8:1e:31:be:0d:c8:67:81:e0:67:c6:07:
de:13:76:38:32:f9:a6:22:a9:30:e2:42:c6:88:60:f7:b4:b7:
e3:18:0e:33:38:de:9d:b9:2e:af:36:3e:d5:13:ad:6f:7e:d5:
ae:1f:6d:7f:8d:fd:9f:b2:a9:ed:76:12:db:2b:5e:55:75:97:
b7:ce:e0:15:ef:13:f7:2b:59:57:cd:9c:00:c1:94:b2:48:16:
52:22:77:ff:db:f9:35:02:8d:b0:f1:e8:c9:ab:91:65:a0:f3:
26:70:2c:f5:a3:55:77:8e:ab:e7:6d:11:99:3e:eb:de:51:58:
28:1c:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:26 2025 by rpki-client on console.sobornost.net