Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa
File: b758d768-536e-3bf2-96a6-ecc0554032dd.roa (raw, json)
Hash identifier: HJwsb/OyU0sXWIHFkL17Crnie7XvI2Xwus43F5GL5z4=
Subject key identifier: 70:30:E4:4B:88:98:3C:8A:51:25:86:2B:0D:99:F5:34:60:0C:57:4B
Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial: 010D0C9F432858493ED3D857136AC50DCA469280
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 14041
IP address blocks: 129.19.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d8:57:13:6a:c5:0d:ca:46:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=bfdc144a-1097-4703-9604-3f932668b681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:b1:dd:03:ea:1b:0b:a2:f7:fb:08:60:23:
15:6f:09:d4:58:dc:e9:55:5e:ad:f9:db:73:52:e1:
98:db:0b:b0:9d:25:f0:99:45:a8:56:d4:41:13:bc:
5e:9f:00:b2:0b:9a:95:31:a8:2a:7a:1a:9c:d5:a8:
6d:3d:b3:e0:11:f6:12:8f:bd:e4:66:8e:6f:d0:3f:
cc:30:fe:76:b7:c6:e1:fc:61:05:69:f7:1e:44:e4:
67:49:3a:42:96:00:e6:6c:49:23:7a:6d:d4:d7:8b:
de:22:e4:c1:ee:3d:44:6a:f5:56:ad:af:33:57:c2:
58:76:05:38:4f:66:73:85:8f:10:1b:bd:29:3e:a7:
5a:90:41:95:6b:ce:5c:ea:d1:dd:6d:63:07:51:06:
dd:f6:c7:7d:79:15:1a:be:4e:9e:73:a0:4f:96:6c:
bd:19:08:a9:cb:4a:86:b9:85:05:92:45:85:0d:be:
f1:ba:d1:11:c8:d9:bc:50:9e:93:24:af:99:76:eb:
4a:21:02:fc:da:71:b3:bb:a5:a9:54:de:4d:5e:33:
14:ec:a3:d0:de:54:db:ec:ce:79:17:45:c0:70:d1:
36:55:a8:37:b0:17:3c:f1:f5:e1:3a:10:24:3b:94:
fd:0f:de:df:1b:67:cf:e0:25:32:9e:d8:22:ee:7f:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:30:E4:4B:88:98:3C:8A:51:25:86:2B:0D:99:F5:34:60:0C:57:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
X509v3 Authority Key Identifier:
keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
sbgp-ipAddrBlock: critical
IPv4:
129.19.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:d7:70:01:cf:60:de:e4:c9:7e:17:95:c6:d7:b6:85:59:2e:
d1:a6:0f:39:f7:28:85:70:b4:34:e4:ce:e3:58:af:50:d4:be:
67:92:88:cb:a6:bf:45:dc:90:72:94:ac:fd:c3:18:8e:d2:6d:
dc:94:c4:41:bb:3d:13:3e:5f:06:a2:81:cc:3e:91:7e:ab:2b:
27:eb:91:35:56:0b:cb:19:9c:04:bc:b9:84:9d:a4:79:a5:c1:
e7:9d:a7:31:1b:4e:11:69:90:ff:19:cf:11:eb:d2:cb:a3:a8:
32:1d:15:05:b2:61:bd:6f:19:df:59:59:13:ac:83:c8:7a:a6:
42:6d:f1:82:f2:45:74:1a:75:66:1c:df:2d:5d:27:6f:a4:70:
98:91:d5:aa:2e:d8:30:74:0f:35:81:43:33:71:cd:dc:45:47:
fc:02:7f:f5:48:14:bc:a0:58:81:b3:61:36:ce:93:bb:ac:a3:
ff:88:9c:c9:54:92:0a:9a:1b:3d:07:05:cd:8a:dc:08:ee:be:
8c:97:fd:0c:96:ee:4b:95:8f:d8:b1:7f:3b:18:56:59:5e:a4:
40:09:de:d8:c2:55:8a:d8:22:1e:62:da:af:0b:20:c8:96:b2:
c2:7e:8b:c6:9f:10:c6:ca:49:d2:93:73:b1:d8:78:ed:2c:1e:
a0:8a:e6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:53 2025 by rpki-client on console.sobornost.net