Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa
File: 3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa (raw, json)
Hash identifier: zzbyQxy3JRdWEntH5FjhC1es3cfEY+i9GSHbBYtbjCI=
Subject key identifier: 0C:AD:14:B7:D6:B5:87:97:52:61:B8:38:95:A1:8F:07:CB:DA:F9:99
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285849749249A9D032D19279D06980
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa
Signing time: Tue 08 Apr 2025 07:02:21 +0000
ROA not before: Tue 08 Apr 2025 07:02:21 +0000
ROA not after: Mon 07 Jul 2025 07:02:21 +0000
asID: 54004
IP address blocks: 216.83.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:74:92:49:a9:d0:32:d1:92:79:d0:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Apr 8 07:02:21 2025 GMT
Not After : Jul 7 07:02:21 2025 GMT
Subject: CN=b28e651c-934a-4e24-9346-62a074ec75ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:f3:6e:fd:14:ef:a9:79:86:cf:6d:70:69:
55:f2:2a:2f:83:0b:8f:13:55:ef:18:41:6b:47:e8:
61:66:8f:94:6c:80:ca:7e:4c:72:74:af:ff:5a:25:
c1:c2:6c:71:2d:e9:78:c3:66:e6:d7:67:40:ce:db:
d2:c4:b8:05:c9:97:cc:4d:f6:3e:d9:53:95:ac:42:
78:59:7c:61:a0:9a:66:fb:44:a3:d7:50:68:0c:22:
33:cb:85:17:ea:94:79:5b:81:57:d9:b5:f4:01:34:
12:ca:0b:b5:3d:57:fe:fb:1b:88:6d:e8:8f:26:bc:
95:46:43:3c:4e:f9:00:c0:1a:ab:4c:ee:c1:1a:4d:
1e:0f:77:64:46:52:eb:69:27:4f:86:ef:15:20:b5:
42:c6:73:c0:66:91:c2:68:9d:a1:6e:e4:c5:85:ee:
59:86:ef:ac:8e:7c:b0:4c:3a:01:57:32:52:ae:60:
81:76:0f:08:0d:a2:86:2b:b5:24:e3:55:4a:a5:46:
a2:19:bc:e4:ae:04:3d:4b:d6:74:f1:8b:ea:f2:3f:
ad:54:8a:03:03:33:68:75:20:76:98:b8:5e:f5:b4:
de:2f:57:34:42:6e:e7:13:11:18:cd:1e:58:b1:5b:
38:98:32:91:3d:b5:14:64:e7:81:41:68:bd:53:69:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AD:14:B7:D6:B5:87:97:52:61:B8:38:95:A1:8F:07:CB:DA:F9:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.83.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:8e:15:7a:7a:30:aa:40:ff:29:61:54:b9:4a:b2:3f:5d:4a:
d3:97:08:04:c2:c7:6f:8d:ad:31:a8:f7:7f:02:60:8e:83:7d:
d4:56:21:2f:f2:ba:0b:59:1b:42:66:78:2c:e5:67:55:2d:a9:
cd:9b:d9:a8:d0:78:ea:f8:81:cf:09:3b:5a:bd:32:19:44:6b:
cf:10:64:b8:64:a8:de:bf:67:81:11:e3:9b:9c:a2:33:50:14:
e9:8d:78:d6:ea:20:96:3e:cc:c9:32:f9:f2:c8:8a:23:4f:87:
90:bb:bc:0b:07:fc:02:97:a9:aa:f4:60:be:ba:6d:c6:f0:36:
d0:92:bc:a5:dc:07:31:70:be:02:68:1e:f7:ed:71:c0:8d:47:
73:14:d0:30:7b:c0:f5:72:ac:f7:94:c2:c1:b3:11:8f:e3:24:
0d:10:80:19:f8:9b:4b:5f:c5:3f:67:b7:37:d7:9a:b5:8f:86:
56:32:af:6b:ec:4f:13:fe:23:04:a6:25:f7:ec:dc:b3:01:14:
d2:1d:1c:9e:85:15:c0:6a:9d:db:aa:08:fc:34:e1:56:e5:51:
1c:94:aa:30:9c:b3:df:a5:54:e4:b8:e9:e9:89:0c:ce:a1:2a:
9c:9e:f5:f9:df:bd:8d:cd:f6:23:e8:d3:dd:f0:7f:6b:fd:62:
b2:6d:fe:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:19 2025 by rpki-client on console.sobornost.net