Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/ae105d3e-daa5-3d17-ab23-7f8a827d46fc.roa
File: ae105d3e-daa5-3d17-ab23-7f8a827d46fc.roa (raw, json)
Hash identifier: KCmrvjzRdX7SqscL2snKs+aXJ+tPaQHV9jlmjWm8Q1s=
Subject key identifier: AD:D3:12:49:94:DF:46:5C:48:1D:81:8D:D0:7F:24:1E:93:9B:B2:5E
Certificate issuer: /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial: 010D0C9F432858493B53CAAE2EA2C585F2140FC0
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/ae105d3e-daa5-3d17-ab23-7f8a827d46fc.roa
Signing time: Tue 18 Mar 2025 18:55:21 +0000
ROA not before: Tue 18 Mar 2025 18:55:21 +0000
ROA not after: Mon 16 Jun 2025 18:55:21 +0000
asID: 23294
IP address blocks: 76.165.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3b:53:ca:ae:2e:a2:c5:85:f2:14:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Validity
Not Before: Mar 18 18:55:21 2025 GMT
Not After : Jun 16 18:55:21 2025 GMT
Subject: CN=e0b0d7f9-48bf-4ca2-8e7d-6aca2a727fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:97:d3:56:e5:76:a4:c3:c6:1d:d9:f4:1b:
fe:80:2b:66:89:39:9e:b1:12:e6:03:14:14:00:ba:
76:5c:88:8a:89:77:61:e7:dd:3e:4c:6c:cc:b5:8a:
5e:91:4a:bc:15:b4:20:a2:0a:9b:f0:de:7a:3f:8a:
e1:2b:f5:8f:d7:10:c9:28:b3:23:a8:04:4d:22:b4:
67:2d:3d:44:12:b2:cd:02:72:f5:a6:b6:52:ec:e9:
f5:31:2a:28:16:68:40:8e:05:84:77:e3:d3:33:d3:
a8:68:89:b7:0c:7d:9f:cc:a5:15:39:bc:2b:69:34:
b1:33:02:57:75:48:24:8b:5a:02:12:3f:af:5f:e8:
5b:05:a0:8a:63:7c:93:2c:f8:4e:11:98:4f:b8:54:
2e:81:1d:24:d4:7d:cf:02:21:d9:64:d1:d1:7a:b5:
16:47:b4:b0:13:3a:0c:9d:1f:82:37:84:b2:ba:7c:
5a:98:e8:7a:c1:88:3a:be:6e:d6:41:a6:d1:47:29:
5e:23:62:89:b0:94:af:2e:f2:45:1f:16:dc:27:d3:
ef:11:2b:83:c0:c3:fd:96:f4:82:e2:bf:4b:0a:64:
ac:4f:53:54:2c:2e:55:f9:af:a1:08:7e:8e:86:77:
a6:38:26:8a:39:ab:7f:78:0e:4a:d6:3c:f2:b2:36:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D3:12:49:94:DF:46:5C:48:1D:81:8D:D0:7F:24:1E:93:9B:B2:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/ae105d3e-daa5-3d17-ab23-7f8a827d46fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl
X509v3 Authority Key Identifier:
keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
sbgp-ipAddrBlock: critical
IPv4:
76.165.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:6c:43:65:c7:f4:76:3e:73:f2:a2:c3:f2:66:82:4b:e7:d0:
51:88:63:48:b0:13:56:f0:96:8f:ba:e0:fd:29:65:ba:f1:af:
3d:f2:d5:20:bc:27:a4:74:33:01:4f:f9:82:34:d7:6e:81:96:
ed:b1:f9:67:df:a9:e3:23:ea:ca:7a:5d:29:ae:8c:31:35:d9:
11:fa:c3:55:ca:5c:8c:4a:a1:34:7d:a2:c0:9f:ba:58:31:4c:
a8:08:f9:60:bd:e1:1f:cc:4d:2b:46:19:18:c6:14:88:ac:2c:
e7:22:13:2d:de:e5:f0:dc:dc:0c:05:a1:b2:b5:bc:da:a3:cb:
1d:e8:49:12:c0:5d:8d:ed:b9:54:7f:98:46:2d:d7:b5:f6:1b:
15:f4:64:b3:aa:46:b5:8a:8f:c7:6f:25:7b:b9:ba:ef:bf:c1:
ed:53:d7:f9:d6:ff:55:9d:cb:bd:ab:0d:c5:a5:10:9f:ae:b6:
c3:ee:a0:80:36:34:87:ee:c0:b1:82:4d:cf:16:db:70:62:76:
a0:c0:c9:2f:fa:2d:25:d5:75:bc:8a:13:55:92:ff:43:a5:b4:
97:fe:e7:47:38:75:08:ec:46:18:67:82:b0:15:6a:5d:a4:38:
c4:ee:3b:0a:33:54:e3:47:f0:d2:57:ff:0e:20:ec:4d:f3:14:
ca:c1:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:14 2025 by rpki-client on console.sobornost.net