Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa
File: 297bb316-79a6-3af7-a3db-ad1e4f19895e.roa (raw, json)
Hash identifier: 6oXMWM487EPoPiCIVxdWt+ma1vIgF7QvSOl7TO5zLcU=
Subject key identifier: B5:EF:B8:A9:36:52:14:C1:BA:0E:14:4F:8E:D1:D0:E5:8E:92:1E:9E
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F4328584961B991DDCB4BA3CAB78BCF00
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 29968
IP address blocks: 208.20.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:91:dd:cb:4b:a3:ca:b7:8b:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=76cc1885-2159-42cb-896f-baad9b528c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:47:7b:9b:43:a0:35:58:5d:5d:c8:40:e6:
e5:e3:f1:c8:f9:f4:01:40:38:36:b1:4a:ad:00:4e:
0b:7d:a7:bc:34:62:b8:7b:f2:14:69:e2:ff:df:92:
4e:0c:a7:35:89:bf:da:d8:95:64:0f:50:fb:49:03:
47:2f:c2:df:9f:b2:ed:65:41:1d:c8:2c:79:59:81:
d8:6f:89:2d:68:67:3a:3c:4b:f7:77:82:32:90:c5:
35:98:ad:cd:db:77:a4:95:5a:cd:8c:cb:18:db:d3:
bd:11:3a:d5:81:d1:ff:e4:ba:c5:35:45:6e:1d:7e:
bc:62:77:46:d2:4a:95:5e:37:7d:28:e2:3b:dc:7b:
7f:f1:30:5c:1e:9e:49:0f:9d:13:3c:65:28:29:25:
ab:eb:90:51:84:8b:9b:f0:c3:9e:09:d4:07:84:b4:
14:38:fc:fb:d3:b0:9b:64:4a:33:ca:8c:86:2b:b1:
9e:8d:2b:a2:90:af:65:a0:fc:15:9a:51:d9:57:08:
83:0f:3d:49:c3:e5:74:be:a0:f4:5b:ac:70:2b:0d:
25:8c:61:14:e0:93:38:e3:06:5b:18:5a:a5:1d:ab:
f6:b3:52:f7:42:e7:ce:4d:e7:b9:b7:2f:b6:e4:89:
f6:1d:c3:fb:ed:79:a0:7a:e6:fa:45:85:25:7e:0e:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:B8:A9:36:52:14:C1:BA:0E:14:4F:8E:D1:D0:E5:8E:92:1E:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.20.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:58:60:56:b0:13:0f:a4:cb:9e:29:e0:1c:98:fa:e5:13:36:
5e:f9:e2:bf:9c:16:41:5b:ff:42:f0:36:a6:47:31:6c:af:03:
ba:00:3c:6d:f9:fc:99:5f:7c:08:5e:45:b4:66:db:8b:71:7f:
76:fd:7c:e3:c3:06:60:27:8f:cc:52:05:37:8d:40:3b:2b:3d:
43:8a:37:bf:ef:0d:d6:d5:5f:01:26:61:cb:bd:e0:0a:1e:2b:
c2:a1:12:8e:a5:1c:0f:d0:83:bf:99:0d:6b:17:6d:0b:6c:9b:
60:a9:3c:b5:d1:ee:e7:0d:7c:fa:a6:3a:90:51:d4:ea:21:7a:
43:88:2e:12:28:fd:d2:9b:61:9e:a5:d2:4e:48:9f:07:eb:af:
8d:f2:5d:c8:d4:d0:85:13:58:32:ba:f6:57:76:9c:57:2c:66:
08:bf:3b:70:8f:c1:57:44:9e:86:26:12:5a:72:b8:b8:81:43:
b5:d1:1a:4a:24:99:f1:c8:9b:dc:25:cf:25:80:ca:89:91:21:
47:51:a9:05:c2:04:46:6a:e8:f4:e1:74:4c:7b:06:83:a0:e6:
e9:be:33:51:5c:f8:5c:51:ed:04:68:af:80:d1:cd:39:b8:f6:
f0:f1:9c:10:c7:fb:93:59:ea:0d:63:01:ae:15:8a:27:84:b6:
dd:dd:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:36 2025 by rpki-client on console.sobornost.net