Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa
File: b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa (raw, json)
Hash identifier: LyoUj/uDEhTxLo5VbGEesq7Nz5UIbB+zBTHLRWdmHOo=
Subject key identifier: 1E:4E:75:96:BE:B5:A3:67:21:93:4B:2B:2F:F5:F4:0C:CA:EC:87:F5
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F432858496A19AD3590625833FE2DBA00
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 25697
IP address blocks: 209.151.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:ad:35:90:62:58:33:fe:2d:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=6f7711f6-8809-4d02-a979-dfec7fc0d47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:d3:64:b8:76:30:e7:38:00:7c:76:d7:d2:
55:28:a4:19:74:fc:56:2f:21:03:20:7e:42:1e:aa:
82:dd:16:55:f4:ab:d0:51:2d:ec:76:d6:80:7e:ad:
f0:ae:f4:91:90:b4:6d:a9:92:eb:b6:fb:07:3a:e3:
49:7a:a0:62:56:17:bd:09:58:f4:35:3d:ff:c1:2e:
37:99:64:94:44:a4:9f:34:26:80:fd:e0:65:10:23:
49:68:52:a0:f7:5e:10:cd:e7:63:e8:e1:ad:18:21:
ab:a9:10:45:7d:55:f5:e5:c2:34:ca:6e:d9:76:3c:
3f:a5:78:23:50:68:00:25:81:6a:73:3b:43:6d:b1:
68:32:87:ca:68:b2:91:bc:0d:3f:0a:7d:47:86:94:
49:a2:18:56:3f:64:0f:cb:4b:cb:4b:3c:de:d2:26:
ee:1a:58:72:84:b6:4e:57:ee:84:de:2a:50:1d:62:
02:4b:48:0a:d5:e7:30:40:bf:9c:0e:7f:5a:2d:ee:
94:42:96:2d:e2:56:d3:be:83:ea:5d:e9:9f:f2:57:
74:30:8f:7e:21:99:93:7c:83:29:28:27:5e:33:94:
d6:38:25:3c:e3:d2:3e:a1:ea:95:27:0d:b7:7a:85:
a5:11:1c:5b:3c:50:3e:ac:4d:3f:f6:38:2b:fa:aa:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4E:75:96:BE:B5:A3:67:21:93:4B:2B:2F:F5:F4:0C:CA:EC:87:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7d6b64d-3bc0-31ea-8917-39a0e3149f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:45:6c:fb:99:c7:08:8e:69:40:b2:78:80:17:52:37:2e:4a:
dc:3e:df:98:24:2a:c1:39:b4:4a:aa:75:fc:ec:df:f7:34:e0:
c4:62:c8:ca:95:6a:75:c9:e7:d4:e6:95:3d:1e:7c:81:fd:0e:
51:8a:87:30:58:db:4a:a4:37:8a:64:f7:97:10:1c:6a:ff:ea:
62:0c:2c:82:a2:cc:8d:c4:b4:f9:75:db:29:e6:a3:38:14:26:
e3:e7:bf:15:5d:7e:dd:fd:36:e7:88:cf:5d:63:26:e5:9c:d4:
b3:be:62:82:4c:51:1b:ee:fb:26:5a:e3:d5:ce:0e:54:34:c9:
9e:58:b2:93:28:33:de:7b:88:39:9c:94:8d:d4:b9:30:95:24:
17:90:9d:25:3e:d3:76:24:97:53:a8:2c:42:dd:16:e3:54:f2:
cb:ba:fc:3a:7b:d3:fe:00:9b:fe:d4:a3:2c:68:4c:58:17:1e:
55:ba:8b:a5:26:59:94:ff:3c:ec:78:5f:de:19:d8:54:6a:cf:
a2:a4:78:06:ac:aa:31:87:98:47:9d:d0:a1:17:22:20:a1:fc:
88:5f:70:cc:87:03:cc:fe:c7:d3:ce:b0:54:a5:22:3b:80:46:
a9:8a:33:07:15:ce:44:e1:12:c4:13:67:5b:59:21:56:24:4b:
f2:e1:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net