Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/75778f4d-d544-304c-866f-15f6bf74494e.roa
File: 75778f4d-d544-304c-866f-15f6bf74494e.roa (raw, json)
Hash identifier: lnF5r6wpS4GwadeCrW2J7rZYZykpOpoQ/hHG45pjWeI=
Subject key identifier: 8A:42:51:A3:33:FD:4D:B4:7B:DA:96:A3:67:3D:F9:B8:B3:1B:A3:A3
Certificate issuer: /CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
Certificate serial: 010D0C9F432858496DCFC4285F9C6FD992470B80
Authority key identifier: 63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/75778f4d-d544-304c-866f-15f6bf74494e.roa
Signing time: Sat 05 Apr 2025 20:55:33 +0000
ROA not before: Sat 05 Apr 2025 20:55:33 +0000
ROA not after: Fri 04 Jul 2025 20:55:33 +0000
asID: 40846
IP address blocks: 131.153.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6d:cf:c4:28:5f:9c:6f:d9:92:47:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
Validity
Not Before: Apr 5 20:55:33 2025 GMT
Not After : Jul 4 20:55:33 2025 GMT
Subject: CN=37600822-4b33-4057-8dd0-3c7e71266bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:ee:ee:3e:99:75:3f:0d:3a:ca:e9:1d:34:
dc:7c:cc:7b:3c:fb:70:13:84:f0:8a:e8:56:44:67:
9a:aa:ca:1f:4f:46:9e:be:b3:fe:88:ef:85:16:59:
45:06:7e:ad:4d:35:d2:37:6e:0a:61:5b:6f:2f:4b:
19:d6:44:e5:49:8e:2e:36:2a:01:e4:09:92:a9:50:
b3:e1:35:dd:c2:c5:c9:9b:27:f4:29:61:5a:5d:64:
b2:38:f1:86:f5:8f:62:bf:08:cd:12:14:a7:7f:6a:
ba:f3:52:07:83:79:11:5c:4d:24:51:ed:de:2e:e0:
70:1e:6e:a8:e2:09:0c:40:85:d0:a0:7a:33:26:15:
fb:10:fc:8a:f7:28:80:f7:0d:ce:dd:2a:ad:53:56:
1f:af:a5:ef:da:0f:99:ba:4a:34:45:4f:f6:aa:d4:
72:93:c7:68:99:83:64:9b:8c:ff:f4:a1:a9:a8:0d:
04:c4:7b:c4:19:37:ea:2a:63:26:9c:ab:44:92:e0:
42:c5:66:f2:95:97:22:41:90:65:fc:47:3f:1f:c6:
5c:2c:1a:2e:00:bf:50:fa:19:3f:bc:c4:23:56:91:
5d:82:4f:6b:aa:fd:51:64:d1:83:fc:69:71:af:83:
1f:52:94:21:9b:6f:6d:cb:fa:54:ef:50:64:1f:10:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:42:51:A3:33:FD:4D:B4:7B:DA:96:A3:67:3D:F9:B8:B3:1B:A3:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/75778f4d-d544-304c-866f-15f6bf74494e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl
X509v3 Authority Key Identifier:
keyid:63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:84:08:3b:da:ce:3b:e9:18:db:78:51:9d:cd:7b:02:17:d0:
81:ed:ad:6f:20:a2:d3:3c:29:69:96:d9:a0:9b:0d:92:1b:fa:
f9:ea:04:b7:41:d7:17:d9:02:5c:fa:bc:81:ff:c2:ea:a8:74:
66:df:2b:67:62:f7:fa:b9:cb:a1:0a:f7:7c:bf:80:fd:40:25:
c2:73:16:79:f2:78:ad:b3:b1:d5:6d:f6:05:dd:6c:e0:d4:7a:
16:6e:f0:9d:ed:20:ff:81:ce:c1:a9:d8:33:cb:1d:88:47:9a:
0f:5a:de:d2:2e:0f:6e:5d:41:6b:00:81:c5:0f:dc:5a:0f:e0:
c3:6b:56:f2:38:d9:10:30:d5:3f:15:42:a2:ba:cf:51:11:2e:
35:07:df:f7:f2:37:2b:d4:07:bc:0b:f9:39:bb:18:25:70:32:
f3:2f:6b:38:08:a5:0e:8d:ba:ad:2e:0b:61:f4:2c:31:3f:e6:
4c:64:54:9a:00:5f:90:da:87:5a:d4:a1:27:ee:b2:d9:88:7f:
27:c4:f4:01:3f:07:b2:c5:4e:35:98:f2:99:43:cd:18:4a:43:
dc:be:90:1e:35:7a:aa:30:ca:b6:11:f2:55:96:8c:20:80:28:
60:79:4d:41:5e:91:38:43:b5:20:29:43:72:ac:a5:a0:1b:bd:
9a:f7:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net