Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa
File: a1f25b08-c285-351d-a5ce-01201a16ceaa.roa (raw, json)
Hash identifier: HuIUGvemNvbR7eoMV8DS+q6MXiGJqgqFP2yUYJT7VMw=
Subject key identifier: F2:40:C4:8E:E0:47:77:CF:3C:DD:C5:E5:93:C1:10:F5:84:E0:5F:0F
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F43285848FD56BDF29A108C03D79BFA00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 398202
IP address blocks: 23.148.80.0/24 maxlen: 24
66.118.240.0/22 maxlen: 24
69.64.116.0/22 maxlen: 24
2605:88c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:bd:f2:9a:10:8c:03:d7:9b:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=355fa281-2e01-45a5-b252-a9e32760bfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:0c:7d:34:86:c6:81:76:f2:d7:fd:4c:8b:
fd:6e:77:7e:8f:a5:c3:b5:4d:a4:00:1a:1a:cf:05:
35:72:bd:a4:59:65:75:2f:d3:5d:e7:9a:ff:e5:a1:
3f:5e:e7:a8:64:77:7b:58:52:35:57:49:d8:66:62:
5a:f4:f4:e7:c1:50:27:87:a6:32:8d:7e:75:a9:00:
f3:57:f5:9e:d0:64:29:f3:ab:c9:cf:ec:ef:4a:dc:
61:44:32:de:6e:6a:65:7f:12:19:5b:e7:94:64:4e:
49:e9:cb:c5:81:74:28:62:45:9b:6b:19:6a:49:59:
ff:44:6e:e9:69:a9:d2:40:78:26:e4:a4:a0:ff:18:
a6:f3:47:a1:1f:4a:a0:5a:56:93:e7:a8:c9:79:d8:
27:e4:31:d8:a8:72:10:4f:81:af:1f:2c:50:b7:09:
87:1c:f1:d4:c2:aa:04:ae:22:76:44:39:db:ff:86:
68:29:57:cd:a3:7a:3d:58:74:86:e3:94:8e:6f:14:
ca:f1:ea:ee:78:64:c6:be:0c:85:38:b8:19:97:d8:
61:4b:fb:ce:45:4c:cc:de:32:45:19:09:56:15:02:
32:16:0f:0f:27:bd:85:75:9b:17:f1:6a:e5:81:ca:
3e:94:82:ab:73:1d:db:1b:bf:cd:87:db:c3:2f:6d:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:40:C4:8E:E0:47:77:CF:3C:DD:C5:E5:93:C1:10:F5:84:E0:5F:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.80.0/24
66.118.240.0/22
69.64.116.0/22
IPv6:
2605:88c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:d2:84:f2:14:4d:df:56:9b:09:f6:bd:f6:c3:3b:dc:f5:39:
eb:4b:56:99:27:05:a7:20:2d:dd:ba:fc:27:0c:fb:07:ca:62:
a8:ce:e3:0e:6d:69:2d:13:be:bf:3e:f4:3f:c2:d1:32:57:0e:
5f:27:92:30:7d:a8:f9:d5:9e:4b:5c:5f:3e:de:f7:ce:34:27:
72:5a:9b:39:af:e2:ee:0b:16:58:cf:ce:0f:1e:26:dd:3a:1e:
f5:d3:35:fb:38:bc:4c:ab:b9:f7:87:36:7f:7a:b7:93:0b:82:
2b:75:18:6a:d5:61:c1:01:7d:a9:32:c5:b4:7f:e2:0c:e7:b9:
7e:56:25:30:ac:05:12:c9:07:54:d4:76:1f:53:90:09:e1:fa:
18:c2:3b:d6:1e:f4:de:c9:c2:0f:8d:0c:06:6e:43:dc:c1:40:
c1:3d:e7:7c:13:d9:a4:38:ec:d6:68:dd:fe:00:81:e2:6f:5e:
31:ad:f6:5a:0e:5e:0c:7f:6c:46:c9:36:a7:12:9f:0c:f5:f2:
53:31:3e:69:17:75:95:85:2f:ce:ab:2b:ba:ee:d5:04:66:35:
89:4b:24:b8:66:08:aa:fa:df:54:8a:e7:bd:fe:38:66:2a:ce:
7f:55:11:40:13:84:8f:54:b2:cb:65:e7:f6:37:9b:58:23:e4:
4a:10:db:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:39 2025 by rpki-client on console.sobornost.net