Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa
File: d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa (raw, json)
Hash identifier: G2xEO5avEBGXu2F3HxfBVTqE8fcEta8gHznpMvJCzwo=
Subject key identifier: CF:A9:37:F2:13:56:6D:C6:F4:B3:89:64:76:08:65:F7:D2:CC:D3:3D
Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial: 010D0C9F4328584981D458192F52BA6EFC4915E0
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 396998
IP address blocks: 64.68.192.0/24 maxlen: 24
2620:49:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:58:19:2f:52:ba:6e:fc:49:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=75102022-a17d-4301-b6a6-147a9a1654b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:e0:cc:b2:94:38:4b:16:fe:d0:be:8c:2f:
76:eb:05:43:4f:5e:17:6f:af:f9:20:a9:d6:95:8d:
70:21:79:59:ff:f4:87:27:7d:fe:e2:f7:c0:69:80:
1a:98:43:d4:fa:4b:a2:37:ae:bf:a4:53:c9:5b:50:
3e:cf:8b:8f:cd:44:00:70:8e:b3:b2:70:e5:45:bc:
0f:33:ce:78:00:fd:ff:40:79:41:4e:aa:94:48:18:
47:94:df:33:44:c0:4a:8d:4f:4a:4c:42:3e:45:10:
60:8e:63:db:30:b1:39:ac:10:32:c3:46:cb:3d:d2:
48:68:e2:64:26:b8:29:5c:6d:02:45:05:08:ce:f6:
42:2f:51:a0:23:67:50:1d:4f:7d:dd:ab:6a:77:82:
a4:ed:ce:2d:9e:03:d1:cb:b4:4d:92:d1:ab:0c:c4:
60:4c:09:4f:d9:e8:aa:7d:78:51:bb:e6:5a:75:45:
88:2e:0c:60:f2:cb:eb:d9:36:09:54:64:77:a2:b8:
5b:ac:85:be:7a:f9:d5:41:a3:0c:9d:75:c2:4b:2b:
9f:63:d1:d8:66:3b:90:62:10:51:a1:53:ea:3e:40:
f1:ac:11:f5:b6:1b:57:24:40:b7:63:f5:be:12:52:
aa:ee:99:ac:62:4f:b2:e7:00:a5:32:1b:ad:d2:f5:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A9:37:F2:13:56:6D:C6:F4:B3:89:64:76:08:65:F7:D2:CC:D3:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
X509v3 Authority Key Identifier:
keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
sbgp-ipAddrBlock: critical
IPv4:
64.68.192.0/24
IPv6:
2620:49:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:15:03:50:5d:fb:32:44:ac:53:7d:da:8b:28:fd:88:8a:69:
2b:f6:ec:73:91:c8:e1:00:09:40:07:4a:3a:3c:cb:2c:56:7b:
92:ed:c9:48:40:ba:01:40:b6:15:ac:f6:33:53:83:a4:5b:d4:
03:14:bd:0e:a2:0f:9d:64:c9:8a:d7:ea:56:40:df:fd:d2:cc:
b5:60:e7:dc:92:62:86:e7:43:39:d2:30:ab:4c:c2:67:f1:e4:
02:ff:c8:83:b2:c1:0d:4c:b4:44:4b:dc:a4:1a:ee:2d:37:70:
d6:87:b6:75:e0:b0:8d:fe:3f:09:c2:09:8a:91:ac:f5:53:10:
99:22:df:ac:43:3d:58:52:7e:47:08:45:b2:af:58:1e:8f:cc:
53:be:9d:92:53:12:a6:8e:f8:24:38:f7:23:ee:72:9e:13:4e:
4e:ff:fa:b7:0e:da:c0:12:fd:ae:54:3c:43:20:2f:d4:cd:3c:
6d:75:5f:84:97:c0:eb:c2:2e:b8:3a:af:f8:91:9f:15:e5:26:
21:5c:2c:5d:8b:b4:3c:c1:4d:ec:71:c9:51:d2:ef:d3:2d:ee:
c6:01:1f:44:ff:0f:04:5b:12:40:86:84:a6:1a:bc:f9:3f:f2:
2c:30:2c:02:86:af:4a:00:3d:3b:34:1e:f7:18:c3:fb:6f:eb:
87:df:d0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:36 2025 by rpki-client on console.sobornost.net