Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa
File: 15971b5a-708e-36a4-9675-d45099021eac.roa (raw, json)
Hash identifier: E3dPphqJ4RnfgqZVi5O4pk+nbPEM20oSxRaRGDrBBRc=
Subject key identifier: 20:9E:66:D7:C6:32:8D:62:17:E0:B9:C0:FE:F0:F4:95:E5:5D:33:45
Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial: 010D0C9F4328584953C4176E41C5BAAAF3964B00
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 13849
IP address blocks: 2602:fbb5::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:17:6e:41:c5:ba:aa:f3:96:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=fbdb8a90-b2fa-4abb-a188-e5e146819e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:4c:99:9c:f3:da:4a:c7:c8:77:99:43:a1:
15:24:e7:a9:34:9e:7b:c0:7b:6f:74:1d:95:bc:d4:
41:a3:2f:f5:c8:71:81:6c:cf:e7:af:c2:f0:1e:70:
78:73:3e:7e:01:4e:44:17:1b:1d:38:45:19:c7:5e:
70:ec:37:3d:3f:e6:91:29:51:19:ed:cd:23:fb:a2:
c6:d6:5c:cd:86:ee:ae:76:fe:7e:35:22:de:aa:45:
83:2b:2c:5b:17:9d:81:23:7a:b5:79:97:18:cf:df:
71:7f:a2:cc:88:34:4d:e1:81:7b:ce:2f:6d:c1:5d:
7f:d2:f8:29:2f:6b:23:97:0f:9a:dd:42:27:86:ae:
6e:c9:8f:ef:8b:76:70:d5:76:4d:0f:37:e7:37:cd:
a1:d6:16:06:35:7b:d9:f9:47:f8:fd:f7:d1:6d:03:
a7:07:9f:4e:ab:8b:d1:f1:5a:1e:97:2a:eb:25:2d:
bc:51:32:4c:66:b9:e1:3f:b4:b3:72:7c:d5:d6:1c:
c8:f8:e4:a9:7b:52:af:bd:b7:42:40:6d:50:8e:3b:
49:0f:52:96:3a:c7:77:15:12:27:1a:07:a9:f7:07:
0e:51:08:37:51:dc:fc:0e:b1:9c:e5:54:44:db:9c:
94:de:6e:4f:4d:da:ea:b9:f6:7e:4b:61:d4:12:e4:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:66:D7:C6:32:8D:62:17:E0:B9:C0:FE:F0:F4:95:E5:5D:33:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
X509v3 Authority Key Identifier:
keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbb5::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:e1:64:e8:c1:7e:1b:18:ff:a4:d8:0f:13:4e:5e:a3:fb:35:
17:4b:52:b2:21:df:66:3b:90:4b:1a:46:fa:d1:b6:eb:9a:58:
9b:cc:5d:32:27:a0:51:7d:21:c1:f8:c0:8f:30:da:72:5c:bf:
60:6c:df:9d:47:62:70:fe:70:08:98:f6:a7:6f:35:47:3e:1e:
a7:65:7f:de:24:42:d6:79:4e:87:36:32:e6:92:19:a4:a9:62:
46:f2:fd:4f:3b:27:59:bd:5d:e8:f9:d7:f4:a6:eb:da:94:42:
4c:61:e2:52:2a:ce:2b:5b:2d:83:f8:a3:a7:4c:9d:4a:1e:55:
2a:bf:9d:fc:39:ad:26:6a:4c:89:58:bf:d3:2f:6c:17:bf:2c:
5d:81:aa:32:03:d0:78:3e:94:1d:f1:55:f1:7c:00:93:b4:ff:
8c:8e:6b:be:60:7b:d5:d1:db:c9:d9:a1:9f:57:cd:4a:6b:30:
b0:69:9a:99:2c:d9:20:35:19:21:f3:29:85:b9:7f:90:54:17:
0a:7e:e8:d4:da:38:d2:5f:fd:47:e4:ff:bf:c5:a8:38:79:ee:
b2:74:6d:3f:1c:15:f4:3b:53:25:ee:0b:84:d6:f1:00:ec:ed:
88:b5:99:57:fb:bd:92:b4:dd:7e:4e:c4:2d:06:24:97:0f:2d:
86:6d:1b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:36 2025 by rpki-client on console.sobornost.net