Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa
File: bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa (raw, json)
Hash identifier: a0lUWcsfl/GDXVy7nc5nhLxQpwWWJCr/s+mAVdSt0Vo=
Subject key identifier: BE:77:32:2E:95:24:3C:C7:53:80:C8:E4:17:84:DB:2C:7E:5A:25:DC
Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial: 010D0C9F432858497DA471C13DF677842F69A200
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 19318
IP address blocks: 68.168.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a4:71:c1:3d:f6:77:84:2f:69:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=8b15b53f-4315-4d20-911f-6f34eb38ced9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:3e:36:c3:c9:05:51:ab:16:b3:93:72:6a:
a5:d9:88:b6:d5:c0:89:98:45:43:d1:3e:42:6a:5d:
16:f3:c3:6e:5b:71:c1:8c:9b:dd:87:9a:2e:8b:9d:
93:f5:dd:ee:06:80:76:5c:31:3b:d9:74:7c:10:93:
79:81:22:47:05:bd:65:44:72:4d:64:9e:a9:4b:66:
9f:26:1f:5f:3c:31:aa:8e:90:8f:aa:db:16:c8:8c:
5b:bc:d5:8a:ad:1a:54:3e:97:52:83:af:13:84:11:
66:e1:0e:42:58:c5:79:98:24:6a:68:0f:92:6f:77:
0d:c8:ac:23:23:1c:42:9e:4e:d7:0c:4b:d9:fd:33:
98:73:ee:68:18:18:0a:64:46:db:40:97:1a:07:e0:
57:d8:e4:27:7e:4c:ee:38:0a:9e:f8:c5:c9:2b:da:
98:87:31:15:f1:ca:86:f9:64:81:ec:f5:0b:f2:5e:
64:f6:97:45:0d:e3:79:c8:c6:33:68:c4:ed:34:a8:
9e:e7:41:d7:fd:ae:6e:27:87:1b:dc:c7:40:55:a6:
18:34:c6:cc:ee:db:e7:8b:96:3b:00:00:f8:e0:19:
24:1a:a4:1e:6e:84:3e:46:de:fe:c3:9e:83:ea:e1:
c1:97:c1:74:10:e1:6f:41:33:02:06:b4:4d:ec:22:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:32:2E:95:24:3C:C7:53:80:C8:E4:17:84:DB:2C:7E:5A:25:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
X509v3 Authority Key Identifier:
keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.168.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:17:78:9c:51:ab:a9:c9:0d:91:42:48:4c:44:d3:b3:e0:df:
ec:b7:6d:02:a2:1e:73:9c:9c:95:32:10:37:0b:03:96:fa:b8:
0a:12:9e:35:a1:fd:de:fb:9b:a7:09:fc:e0:e9:a0:91:ea:f1:
2c:05:4f:32:0d:1d:12:f0:d4:04:32:0c:c5:b4:de:45:4b:a3:
77:50:30:4b:63:8e:e9:de:bf:33:27:a1:dc:c6:9f:b6:fd:f4:
79:68:92:58:fc:3e:88:e9:98:5a:a0:ac:5f:15:7d:d4:71:51:
82:23:d8:a8:7c:ed:d6:02:64:88:25:08:00:15:c4:51:f0:b0:
8d:74:39:ad:01:a4:35:f4:98:93:fc:56:a3:40:e9:c7:65:40:
45:73:1e:54:1d:c9:16:bc:2c:aa:a3:b2:77:d8:ed:04:94:72:
16:84:ca:ef:d9:d4:20:56:66:1b:a5:8e:93:3d:ef:e8:74:af:
cf:22:df:47:26:74:de:f6:21:73:7d:dc:5b:32:17:bc:18:47:
9e:01:a1:fe:f4:5a:e1:44:55:d9:32:59:5c:0c:d2:20:21:f8:
f4:44:52:19:fd:92:b4:59:aa:f4:32:91:02:0e:ec:80:c6:82:
59:37:b3:af:8e:00:d6:c4:79:0b:1a:4a:80:02:52:e0:5a:d2:
ff:a8:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net