Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa
File: 32bae387-9a90-39b8-b5de-920b138b534b.roa (raw, json)
Hash identifier: emxX32lyp37i9Zm3QwVG61QZ6QX6dVDh2kK52Lv1xtU=
Subject key identifier: BF:EE:25:BD:79:27:CC:E3:F5:CB:74:04:D1:C7:09:63:71:BA:78:DB
Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
Certificate serial: 010D0C9F43285849244E7C30F5BEB947F2AF7180
Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 46192
IP address blocks: 144.86.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7c:30:f5:be:b9:47:f2:af:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=44f4382d-8767-44b9-bf2d-b5341bd57c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:53:5e:20:b6:1e:f6:94:b0:ad:36:88:48:
bd:96:ec:b3:85:70:79:95:97:3f:6d:e9:44:13:23:
a4:96:57:54:b5:7e:5a:1e:c0:4a:01:b2:70:57:87:
62:51:93:6a:c6:8b:ba:0e:92:17:71:68:7d:9b:ac:
c0:54:3a:1f:63:5c:a9:7a:54:e5:6e:94:16:c8:64:
48:33:b8:be:0a:5c:8c:a1:af:76:29:23:68:22:7b:
37:e5:54:ae:5d:ad:b4:1d:d3:15:19:1d:3d:08:2b:
88:a8:a8:9d:6e:b7:1f:b1:6a:e4:0d:88:80:e7:68:
b7:db:85:29:c8:bf:4a:b5:4a:ba:4f:1f:2d:e4:25:
21:7c:59:ca:85:c6:1f:18:c4:c6:c6:d0:09:a7:83:
d2:3d:df:aa:ce:60:2a:00:46:f2:6a:0e:30:48:76:
d6:b9:c7:02:d1:96:97:31:52:e7:74:12:a0:c5:87:
60:5f:96:39:f2:29:30:e6:a1:b8:9f:22:57:cf:37:
86:1a:d4:ee:fb:5a:ea:54:47:cd:56:da:1c:ee:23:
f4:b5:ca:d2:64:92:a1:82:b8:3e:79:f6:77:19:a1:
c6:f4:e6:4e:16:2f:88:0f:02:13:5a:fc:33:16:e9:
2a:d6:2b:13:5c:79:b3:e9:b6:80:ea:c9:d0:0b:93:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EE:25:BD:79:27:CC:E3:F5:CB:74:04:D1:C7:09:63:71:BA:78:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl
X509v3 Authority Key Identifier:
keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
sbgp-ipAddrBlock: critical
IPv4:
144.86.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:1b:7b:62:60:24:8a:89:03:f4:f1:18:2f:ea:da:a9:99:bb:
16:74:54:26:32:49:67:88:83:4d:49:30:4c:39:f5:26:94:af:
1d:ab:12:a6:d4:04:1d:56:af:0e:23:1f:9a:21:3d:e7:b5:c5:
83:3e:b4:11:3a:44:fa:c1:c2:6b:75:f7:8c:c0:94:ef:b1:ed:
ce:6f:4a:98:1a:17:fc:88:e8:1e:d1:75:33:31:78:b6:60:dd:
76:46:74:27:00:d5:7b:02:e9:7b:27:71:e2:88:72:3e:dc:1e:
56:d3:42:a2:c2:f4:4e:14:5f:e6:94:78:35:21:97:03:63:d0:
cf:09:90:d5:67:22:b4:b9:ff:83:ab:f2:bb:da:33:c1:39:34:
5e:84:c0:b2:49:b8:19:f3:76:5e:6d:eb:f2:ca:06:f5:c3:24:
69:cd:04:b6:2b:7f:d7:9d:78:56:1c:d1:91:cd:31:c9:ad:9d:
e0:cf:6f:86:77:86:b7:8b:8c:14:66:ab:2b:b6:2a:bd:1d:69:
1b:7c:d2:99:0d:7c:4a:34:dc:c5:39:60:b3:8f:2d:b2:d0:95:
35:df:b4:9e:19:4c:66:4d:c6:54:b2:4a:d0:42:d6:ab:88:af:
5c:c5:ac:ec:fa:ed:ba:3b:aa:bd:0f:e1:54:ed:d3:53:51:73:
23:3d:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:38 2025 by rpki-client on console.sobornost.net