Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa
File: a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa (raw, json)
Hash identifier: jqe3GTD8+owfH507DtWjT2FE8ZWBrtVM1POAVLyedWg=
Subject key identifier: D2:A1:61:69:3A:D8:D1:99:CE:E0:CF:3F:03:47:EB:28:06:97:0B:B1
Certificate issuer: /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Certificate serial: 010D0C9F4328584981D453F33FB77D5834C3A080
Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 15108
IP address blocks: 192.160.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:53:f3:3f:b7:7d:58:34:c3:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=fd1c5bce-4afd-461a-9a7e-ae1bb154e5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:4c:5e:cd:40:4e:0b:5c:52:0c:49:99:9e:
96:c9:66:1e:22:11:61:9c:aa:c5:e6:be:da:84:85:
7d:95:1f:ea:50:98:05:b7:86:16:a0:17:8c:fd:f0:
f1:8b:5c:d0:2b:01:52:9d:23:be:76:88:9d:b8:a9:
6c:ed:e7:72:79:e7:24:10:fc:9f:e2:3c:20:a0:eb:
bc:09:d8:9e:66:3b:e7:be:28:2c:41:2f:07:bd:e8:
fe:d5:58:83:1e:07:db:fa:b0:f7:dc:e8:56:4e:c8:
46:3d:2d:18:91:5b:57:f6:fa:63:f3:f1:ae:20:30:
9a:b7:8f:48:58:e9:2f:4c:b6:72:7f:67:44:ca:fe:
71:5d:10:d3:71:fc:39:05:41:6b:d2:2f:44:3f:62:
62:87:e9:ef:ef:f1:93:c6:2b:a5:14:53:18:73:99:
14:82:34:47:ee:07:a2:db:94:12:b1:7f:fd:70:c4:
60:d9:75:75:1f:ce:03:d5:af:cb:c2:d0:70:33:f1:
af:8c:88:30:b8:07:63:36:a5:15:4a:14:34:f6:27:
0c:17:77:fe:28:ce:da:e8:d6:95:7a:28:dc:5d:51:
ea:84:e8:6c:ca:ce:b3:f7:99:ee:fe:4e:a9:9f:10:
31:69:91:74:16:43:39:d0:7c:6b:b9:a4:2d:17:8b:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:61:69:3A:D8:D1:99:CE:E0:CF:3F:03:47:EB:28:06:97:0B:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl
X509v3 Authority Key Identifier:
keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
sbgp-ipAddrBlock: critical
IPv4:
192.160.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:08:9c:4d:93:7d:cb:7a:8e:2c:17:1c:e2:82:97:ab:20:23:
e1:46:4f:ed:2a:df:45:64:d0:19:5d:46:df:ea:e0:02:15:f0:
01:64:d3:d3:15:fd:1b:c3:6a:eb:3b:e1:83:9d:6c:44:0d:c3:
90:90:3b:33:92:9c:b7:98:96:01:38:d1:27:37:72:2e:48:2e:
b2:62:9a:90:af:61:9d:be:1c:f5:5e:75:42:5c:31:b4:47:bc:
e7:c8:f0:a1:da:b1:30:88:39:d6:05:57:83:74:b1:73:02:f3:
31:6d:68:f9:8a:a7:34:8c:91:70:0d:12:29:55:33:5f:8c:a2:
35:04:f9:cd:0e:ee:29:6f:e2:44:e6:f6:94:b5:9c:6b:08:90:
50:15:cf:82:ff:e5:ae:a8:21:27:1d:9c:c2:09:33:fc:05:d2:
53:e6:3c:af:c5:09:22:ab:ca:8f:c6:f3:0a:ba:0f:41:b1:f7:
e5:40:c9:76:7f:88:01:03:d7:66:3f:19:4f:f8:6b:9c:3d:fa:
eb:74:b3:c8:dd:b4:af:1c:fe:25:dd:ee:cb:02:1b:ea:15:03:
dc:32:0c:98:e5:a7:cd:06:a4:67:19:76:04:52:15:09:08:50:
0b:55:50:eb:1b:e9:4a:45:c6:8b:67:2d:f8:81:27:a9:61:be:
74:cd:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:27 2025 by rpki-client on console.sobornost.net