Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/d408bbd1-37e1-308c-8b76-8b42012956d7.roa
File: d408bbd1-37e1-308c-8b76-8b42012956d7.roa (raw, json)
Hash identifier: F48Mu3cTEbn4pI1R5Bw9haFvBvSurcfF6cT7aG27Jj0=
Subject key identifier: 5A:AC:D1:A0:2D:36:4F:B0:33:2F:C1:A7:6A:6D:59:AB:D9:21:AB:9F
Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial: 010D0C9F4328584971143410872C3F6DBA8E8F00
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/d408bbd1-37e1-308c-8b76-8b42012956d7.roa
Signing time: Mon 07 Apr 2025 01:00:47 +0000
ROA not before: Mon 07 Apr 2025 01:00:47 +0000
ROA not after: Sun 06 Jul 2025 01:00:47 +0000
asID: 14618
IP address blocks: 206.146.138.0/24 maxlen: 24
206.146.139.0/24 maxlen: 24
206.146.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:14:34:10:87:2c:3f:6d:ba:8e:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Validity
Not Before: Apr 7 01:00:47 2025 GMT
Not After : Jul 6 01:00:47 2025 GMT
Subject: CN=ec384156-46dc-4dd4-b052-9c68727562a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b9:01:f8:6c:1e:66:73:0e:d1:7b:8c:85:e2:
3d:f3:2f:9c:c6:38:5b:5e:31:d6:58:04:8a:ef:bf:
1a:9e:88:53:47:c5:06:6a:48:88:60:36:34:dd:0c:
6f:a3:ac:94:ed:fe:01:ce:64:64:15:21:08:25:1a:
29:f4:3c:9a:03:9e:1d:42:6f:b3:34:37:05:35:a8:
c8:18:d4:dc:26:fa:17:6c:44:e3:7e:0b:d2:67:0e:
a1:c3:14:67:50:4c:f6:29:9d:05:23:6a:35:6a:f4:
63:e1:da:15:20:a7:9e:52:21:9e:9e:f9:13:19:d7:
bc:01:1c:b7:fa:eb:45:87:0b:15:30:2a:2d:2a:79:
ff:d3:82:0c:d3:78:29:07:c2:c3:06:3b:aa:a0:09:
e6:42:64:41:44:4a:95:00:8c:aa:e8:78:43:aa:c5:
8d:7e:20:53:42:94:8f:58:1e:57:cd:56:3b:86:26:
55:76:cb:d7:92:2d:d7:57:fb:7d:b3:ff:2a:12:b1:
f4:fe:89:9b:7a:79:13:20:37:3e:05:9d:10:27:68:
ec:6b:4a:a9:d6:b8:41:07:5d:f8:44:1f:2b:a4:56:
4d:81:34:88:28:6d:9f:ad:58:83:7a:a1:77:75:c9:
a0:ec:7b:33:81:a4:a5:f8:bd:c0:ce:e9:3d:ee:ea:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:D1:A0:2D:36:4F:B0:33:2F:C1:A7:6A:6D:59:AB:D9:21:AB:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/d408bbd1-37e1-308c-8b76-8b42012956d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
X509v3 Authority Key Identifier:
keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.146.138.0/23
206.146.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:09:79:f3:55:d3:47:db:d1:1a:95:2d:7e:62:78:c5:e7:a9:
d1:8d:3d:12:61:1c:f9:f5:4e:5b:d9:12:25:4a:83:c5:d4:e2:
0b:18:c7:82:f8:69:85:f7:b9:f1:33:44:2c:a4:0f:a6:cd:b6:
01:0c:c8:a4:a5:3d:ec:2f:26:db:8c:ad:bf:8c:65:46:3e:89:
7f:00:98:0b:b6:c6:0d:8d:6f:07:19:e5:ff:23:f6:a4:41:71:
88:28:f3:6d:af:1d:7a:e4:f6:c2:82:a9:de:0d:5d:79:c5:23:
09:b7:d0:7e:77:db:f7:c2:4d:a5:bf:13:63:0f:a3:47:49:6e:
bd:77:57:d8:01:a9:42:26:81:f5:87:78:c8:a3:83:c8:a8:2f:
d1:37:d9:1e:09:4e:ae:5c:55:d9:35:f9:b6:21:6d:7e:bb:80:
04:e4:d4:2b:2f:86:dd:e2:65:3a:37:75:35:18:a4:92:d0:80:
2d:a4:8a:14:1a:8a:43:ce:29:6f:76:f0:29:98:06:3e:71:76:
99:d6:5f:0a:b2:14:e9:4f:5d:76:84:06:a4:22:4a:84:ac:b5:
61:38:f9:1c:a2:a0:92:cc:73:c5:36:8a:10:39:17:c0:20:8b:
53:e1:e3:cf:b4:53:22:39:d4:70:f4:52:36:61:47:08:57:86:
fe:14:97:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:38 2025 by rpki-client on console.sobornost.net