Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa
File: ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa (raw, json)
Hash identifier: oHu9ODRhtRfMZ6MCBrNiEKXRWPAl0w1e92Q45PKFGmo=
Subject key identifier: DA:41:DB:D1:EE:D0:5D:FB:E5:FE:B3:81:BD:3F:0E:F6:5E:1E:80:9D
Certificate issuer: /CN=12fa7453-6b85-412b-b280-7c71eec6c46b
Certificate serial: 010D0C9F4328584964843822C327F99D0961CC00
Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 394356
IP address blocks: 158.51.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:38:22:c3:27:f9:9d:09:61:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=5c5e8bb9-086e-4610-b98e-ae2d86f95ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:21:3d:bb:ef:e5:d2:8a:37:dc:38:26:09:
d9:4b:f3:15:88:26:6f:6e:dd:19:9f:c0:7f:0f:9c:
ad:fe:3d:e2:32:3d:ed:75:30:7e:3c:83:e1:e0:f3:
9f:16:09:38:e0:b6:7e:74:78:c9:a0:7b:d6:2b:5a:
94:b2:70:d9:85:02:12:1d:db:74:a4:32:c3:ac:5b:
c4:b5:46:4e:7d:f5:a3:b6:7e:ab:16:4b:7a:c0:c9:
37:1f:b6:3b:89:ba:46:fe:2f:64:6e:16:76:93:01:
4a:4a:9b:2d:fb:81:98:90:52:2d:6d:29:ff:5a:18:
cd:c4:d9:8f:2c:9c:87:5c:b5:1c:88:67:89:64:5e:
f2:65:f6:36:87:32:b0:43:86:9e:b6:a3:8f:a1:39:
5e:c6:67:55:4b:91:d4:65:17:a7:72:ed:4c:ae:65:
8c:b7:e2:84:27:21:3b:0e:46:a6:32:e9:2a:ec:87:
f0:3b:65:c0:24:c3:f8:9f:39:0d:2f:b8:0f:e6:86:
c2:37:4d:2f:e8:f2:de:88:77:79:e8:9f:45:f2:b2:
fa:a2:77:64:70:66:9b:c6:dd:69:2c:16:1c:bd:6c:
4d:9e:e3:92:a8:5e:49:dd:64:6f:25:3b:d5:0c:12:
71:6b:58:20:79:55:e2:af:15:66:66:26:91:4e:68:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:41:DB:D1:EE:D0:5D:FB:E5:FE:B3:81:BD:3F:0E:F6:5E:1E:80:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl
X509v3 Authority Key Identifier:
keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:7e:57:85:6a:65:d1:a2:a4:b9:10:be:14:f7:ce:8a:0a:be:
a9:26:78:18:a0:9c:a1:43:d8:f4:81:c1:87:91:19:f0:ff:42:
5e:d3:e0:98:92:3e:47:12:11:9b:f7:30:cb:e3:07:3f:5b:42:
8c:eb:71:7c:ac:29:b0:c0:30:eb:80:fd:95:63:28:fb:7e:e3:
38:98:f2:99:a4:62:fb:18:e8:f2:71:0f:0c:02:4f:d8:44:a4:
e7:89:14:9c:3e:ec:e9:e2:ce:07:33:a3:60:29:67:a0:6e:17:
80:e0:c3:d2:47:1d:2d:88:3c:1d:e4:ea:5b:9f:57:b7:b4:84:
bc:c5:c3:20:4d:e8:d3:fa:a5:81:10:f4:e0:85:d4:8e:4f:cd:
3d:7b:2d:ce:05:19:bc:e2:1f:5d:cf:b8:89:b8:5f:39:ae:9a:
b3:57:77:e4:67:23:27:bf:49:60:c3:16:e6:c2:93:bc:68:f4:
6d:51:42:fe:d3:a0:86:12:e0:d4:a8:92:f5:18:9a:f3:fe:2f:
04:38:46:b8:d0:4c:ad:96:20:fb:18:ac:b4:0d:1d:5f:e6:9b:
1c:00:f4:08:c4:55:09:93:ce:f6:7b:7b:7c:22:8c:94:38:83:
e6:d8:86:0a:44:05:a3:39:48:86:e6:c7:40:18:de:e1:20:a3:
54:30:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:28 2025 by rpki-client on console.sobornost.net