Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df57a1e8-6013-3293-a465-84479a07a6cb.roa
File: df57a1e8-6013-3293-a465-84479a07a6cb.roa (raw, json)
Hash identifier: IV0hv57d8LYFDD/BiFZ3J4GcXzlWfifyy6PvCT8bFe8=
Subject key identifier: B1:43:55:15:FD:B0:D5:EC:55:AA:13:70:01:48:05:8F:30:3B:40:40
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285849602118E45B85616FD3CB0700
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df57a1e8-6013-3293-a465-84479a07a6cb.roa
Signing time: Mon 31 Mar 2025 23:18:07 +0000
ROA not before: Mon 31 Mar 2025 23:18:07 +0000
ROA not after: Sun 29 Jun 2025 23:18:07 +0000
asID: 62005
IP address blocks: 69.176.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:60:21:18:e4:5b:85:61:6f:d3:cb:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Mar 31 23:18:07 2025 GMT
Not After : Jun 29 23:18:07 2025 GMT
Subject: CN=5f70064b-c1da-464a-b3dd-989f4545420e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:63:21:fc:d3:70:a8:25:95:8f:06:5b:6c:
37:e6:50:4a:42:19:4d:44:56:86:98:ad:91:c6:03:
0b:7e:ab:98:fe:8c:f8:c5:f3:1c:23:ce:6a:35:48:
97:90:70:26:87:4d:39:e5:ef:e1:ac:03:a6:17:ef:
19:7f:55:d7:94:01:69:f6:d2:83:b5:2b:41:f1:6d:
9f:0d:2c:83:66:33:b1:b4:f9:ef:29:f7:de:a3:9e:
7e:2d:01:db:a5:b0:e5:f8:f6:7f:f0:e8:d5:61:a7:
98:fb:9c:29:a2:e3:10:6b:cb:d4:05:da:95:1d:1f:
fa:83:4b:4f:f3:3b:1c:96:fc:4e:94:cd:0d:f7:b6:
45:0a:bc:00:96:c0:45:ac:36:7a:bf:dc:c9:30:47:
ae:4f:24:fe:2d:dc:0b:bb:2b:94:4d:7e:17:60:b4:
73:e6:e7:1b:7a:9d:9c:b7:48:94:18:fe:c7:f4:b8:
67:58:b7:d3:4f:13:8c:d9:6f:b9:e5:52:f0:6b:b0:
a8:5e:17:6d:c5:66:da:24:56:bd:99:01:e2:31:57:
b9:40:2d:5b:75:e6:5b:59:77:70:de:f8:b8:4d:15:
88:08:10:1a:36:c7:bf:59:b4:2f:5d:a6:23:58:11:
7e:69:b9:b9:be:4d:1f:99:27:d7:72:27:0a:a8:10:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:43:55:15:FD:B0:D5:EC:55:AA:13:70:01:48:05:8F:30:3B:40:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df57a1e8-6013-3293-a465-84479a07a6cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
69.176.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:88:a7:e5:6f:b8:18:fa:43:f5:d9:b8:07:dc:13:61:4e:d9:
9a:4f:f9:cc:6b:7e:0d:95:c4:73:5a:b0:3d:fa:65:c8:a6:b7:
31:09:a5:02:d0:57:91:3d:8b:ca:29:c5:d9:a1:aa:f6:9f:7b:
45:48:62:70:85:ac:d6:89:e7:8a:df:f7:37:0b:5b:0e:40:9c:
8b:a4:0d:79:45:3a:a0:17:d9:82:e0:3e:82:f9:93:dc:5e:b7:
b8:99:e4:36:98:5f:28:8e:14:a0:80:32:28:fb:9e:c8:4e:a2:
b2:0c:70:ae:a6:49:d8:af:e8:bf:0e:06:56:be:88:e6:b3:b6:
7e:4c:ad:e7:e8:ee:8d:37:a4:ba:cf:68:42:66:0f:fc:69:36:
d4:9b:be:a2:a6:8a:c5:f4:73:b7:c0:65:4f:b9:06:ef:e1:c6:
2d:d1:05:c5:64:99:42:1b:02:ca:3e:fa:12:c3:36:02:31:02:
0d:ec:4c:e2:fe:28:01:2c:f7:8e:3e:5c:cb:fe:67:d3:eb:d0:
d7:28:66:d4:b1:a2:30:9c:9e:a4:dd:b0:d6:8b:33:13:4a:b4:
04:3b:eb:2c:95:0c:b8:86:81:ec:2f:06:40:b3:32:9c:aa:33:
f6:d9:e7:02:b9:09:92:a7:35:70:93:db:ca:35:f2:8b:f0:b4:
ca:a7:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:19 2025 by rpki-client on console.sobornost.net