Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa
File: f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa (raw, json)
Hash identifier: /DsUT6ufXrrBx/qnaRbdXN+bo499dn/nDKEvZbwVSgQ=
Subject key identifier: BC:70:3B:42:8B:53:0A:0C:8D:1C:8B:BE:34:48:85:F6:9B:69:3F:F3
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F43285849538426EB533BB79941B4FA00
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa
Signing time: Thu 27 Mar 2025 10:52:11 +0000
ROA not before: Thu 27 Mar 2025 10:52:11 +0000
ROA not after: Wed 25 Jun 2025 10:52:11 +0000
asID: 401585
IP address blocks: 172.81.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:84:26:eb:53:3b:b7:99:41:b4:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Mar 27 10:52:11 2025 GMT
Not After : Jun 25 10:52:11 2025 GMT
Subject: CN=de8889b4-6f87-4c04-824f-f007f4cd3ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:ce:31:a3:26:e8:a3:6d:4c:8b:54:f0:18:
47:0a:da:6d:8c:3b:b0:a8:bf:7f:1e:27:a8:7e:16:
01:73:7f:38:09:50:f3:f6:cd:d4:8b:ee:2e:dd:f4:
5e:19:77:84:bc:64:1f:60:da:7c:b3:f9:61:af:ac:
ca:84:37:86:49:05:be:17:d6:a9:eb:e4:78:ba:88:
23:01:1f:5c:40:52:8e:a5:73:e7:5a:98:88:cf:16:
9d:1c:dc:e9:ac:fc:01:20:d4:1c:1e:fa:90:c3:1f:
6d:d3:f9:75:33:c7:74:01:eb:6c:17:e9:33:ac:48:
45:53:67:35:ef:c4:54:94:05:44:ca:03:f9:c4:04:
cf:0f:3c:b8:12:98:0c:02:23:c0:9f:25:38:bc:ee:
68:07:c6:59:be:8a:de:52:55:90:72:1c:a5:7d:31:
69:b1:87:44:59:c3:8d:02:18:93:93:35:e7:57:a8:
de:ce:85:22:01:82:40:22:7f:d9:3b:e3:a6:c5:82:
15:8c:b0:35:54:b8:a8:bc:4c:1f:3a:b6:46:b0:b7:
34:a3:51:a8:52:8d:9e:1d:26:b5:40:f9:22:72:4e:
35:e9:b0:1e:44:95:7b:bc:d6:4d:90:68:6e:19:5e:
a3:da:28:dc:61:7d:41:9d:d2:e5:e4:12:15:95:10:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:70:3B:42:8B:53:0A:0C:8D:1C:8B:BE:34:48:85:F6:9B:69:3F:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
172.81.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:e8:e5:12:7e:36:fa:9b:ed:ff:c0:db:62:aa:45:82:1b:91:
2d:a2:1b:ec:7c:dd:87:18:2f:c4:ff:14:ef:e8:8d:b6:b3:a2:
99:bc:3e:b9:80:ee:8c:6d:4f:bb:b1:60:46:06:0b:9d:a4:c3:
28:d3:b8:92:94:d9:49:5e:39:f0:fe:a0:3f:80:7b:f8:4e:40:
87:1a:55:12:52:8c:ee:27:f3:ea:06:f1:d8:39:c5:c8:02:1c:
18:d4:96:b8:8e:2b:0b:6d:13:e2:e3:9a:75:40:81:12:35:b1:
e2:20:46:f0:f3:58:68:ae:f2:29:8d:0d:d2:04:04:3a:84:25:
31:7d:1d:4a:2a:6e:a6:fd:ca:51:dd:11:36:1f:7f:04:84:7b:
08:09:43:d4:45:9f:95:84:4c:83:07:ef:8d:f1:97:74:6c:22:
a2:4d:bf:57:07:c4:9d:4e:5a:91:23:c6:60:d1:f6:02:ed:a9:
76:0d:02:80:92:dd:b8:78:8b:02:05:24:33:33:f3:8d:44:1e:
10:c9:2d:09:77:15:2c:81:f5:b2:60:c8:53:e6:07:1d:48:d1:
42:99:5f:ae:fb:4e:df:d4:50:53:1c:8b:b5:dc:a0:7f:eb:f8:
81:8e:a9:6e:c2:d0:51:7f:4c:46:dc:27:4b:a6:1f:a7:4d:d4:
a2:7d:f9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:50 2025 by rpki-client on console.sobornost.net