Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
File: 8e5ed9de-8260-3f23-8a5f-845c119039ad.roa (raw, json)
Hash identifier: OBIsfMtOy6aM0/El9BbGUt/OCdcuFCsxMvMxbq2UAoo=
Subject key identifier: 76:4F:51:D1:7F:C2:D3:F9:0F:86:B4:2F:E6:C8:18:65:42:07:15:BD
Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial: 010D0C9F432858494733EAFF1FF787147E675D00
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 3695
IP address blocks: 70.36.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:ea:ff:1f:f7:87:14:7e:67:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=e17d5dce-2339-4e92-a01e-5cf4ec0c80fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:ac:be:9e:14:1f:eb:f4:e3:71:90:fa:9d:
3b:72:12:5d:8e:33:a6:af:92:6c:28:dd:99:01:cb:
c2:7f:f1:8a:26:62:cf:b0:83:1c:3f:55:1e:1c:ad:
8f:44:76:c5:49:50:79:ee:b1:9e:1b:a4:5c:c9:b7:
bc:16:37:28:3b:9a:97:c6:eb:e4:b8:5f:10:f9:1c:
28:11:3d:5c:13:fc:46:be:ac:f1:2f:1c:b0:11:c1:
62:96:8b:c2:11:c4:1a:d3:ba:25:a4:e4:a7:5c:cd:
0a:35:98:36:86:0b:7a:e6:96:78:23:ba:4e:3a:b1:
f6:60:ff:ef:48:4b:62:fb:0d:58:c5:3e:f9:76:5c:
b8:c2:f0:0d:f9:7d:72:5e:3f:91:af:c7:6a:ce:6e:
56:21:86:23:e9:15:4e:2b:28:b1:6f:cf:0c:56:58:
a4:88:b6:c8:21:53:e9:0c:10:37:f6:71:19:7e:58:
34:a0:a1:59:da:1e:98:93:3a:85:ea:46:0d:e6:c4:
25:c8:59:87:1a:92:fd:fb:09:35:db:93:71:8e:de:
82:fc:bc:27:34:8f:81:1d:7e:64:f3:a3:8f:38:d2:
da:10:d0:ce:f2:dd:9d:50:4e:65:77:2c:77:aa:28:
ab:dc:78:98:78:93:3c:e0:02:cf:21:a0:ce:b7:2f:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4F:51:D1:7F:C2:D3:F9:0F:86:B4:2F:E6:C8:18:65:42:07:15:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
X509v3 Authority Key Identifier:
keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
sbgp-ipAddrBlock: critical
IPv4:
70.36.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:93:8c:94:fa:a1:8a:32:f5:41:15:84:0d:cc:61:c5:9f:28:
ba:9e:27:c5:f0:14:4e:d9:bb:c5:38:5b:0d:d8:61:a7:40:93:
3f:84:55:fa:c9:26:cb:28:bd:29:76:d5:db:d4:5e:41:4e:4f:
06:f0:0a:9d:e1:5d:37:3b:73:77:27:6c:ab:cb:ae:66:25:63:
73:37:06:82:33:b4:e8:51:28:2d:27:42:a8:10:a8:71:85:91:
a9:59:70:d8:ee:31:7e:fd:75:c5:df:21:6f:49:14:31:67:98:
ff:ef:86:40:61:3f:07:03:81:17:45:92:e9:b1:bb:04:fa:7a:
ba:d1:ed:bb:6e:05:31:93:eb:71:d6:c4:35:67:94:06:ad:c4:
0a:92:96:99:ac:25:46:cb:9c:f3:ce:c5:4e:7e:5c:fd:96:1c:
a6:68:06:08:09:34:8a:7b:c8:8e:b8:16:66:5a:67:e8:b9:3a:
dd:c7:d3:a3:e9:5c:42:3c:3f:51:4b:f4:1a:25:41:6b:3d:d8:
fd:e4:9f:db:eb:24:bd:e0:7c:bf:ae:af:5c:a0:9d:45:cf:80:
4d:48:41:fc:35:2e:30:d2:af:a1:a3:8f:20:a7:81:4d:0f:d4:
a8:17:19:ab:bc:01:70:cf:94:df:c3:6d:b7:3e:39:09:da:f7:
3f:b4:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:51 2025 by rpki-client on console.sobornost.net