Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4364db7a-1be5-345a-9e0a-201915c52972.roa
File: 4364db7a-1be5-345a-9e0a-201915c52972.roa (raw, json)
Hash identifier: t3YektG/6fD3xiQ9kA6UJIkOPQpqUs+RkzBSVJo84ww=
Subject key identifier: 0F:24:27:1E:E6:ED:C0:F4:83:93:A1:70:30:6A:91:B6:50:43:BC:75
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285849446941C812810043C4DE5CE0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4364db7a-1be5-345a-9e0a-201915c52972.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 64267
IP address blocks: 208.89.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:41:c8:12:81:00:43:c4:de:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=b448b073-6d07-48cf-b19c-69f8c1caf29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:50:20:4c:75:ef:60:d7:06:c7:b6:1c:c5:
f3:f9:3e:73:09:d8:fa:dc:98:60:97:4c:4a:27:d8:
e0:b0:79:93:a8:fa:9b:cd:63:56:9b:86:83:60:ea:
0a:ee:d9:79:82:0c:11:57:25:41:88:e1:73:ff:7a:
9d:7b:b7:28:83:95:53:70:65:a7:e8:f2:68:23:2a:
81:38:b7:63:2f:ab:d0:8b:3a:1a:0b:7e:78:2f:b8:
5f:96:33:34:65:8a:6b:8c:2c:44:a5:ff:81:ec:81:
9a:a8:97:a6:59:1a:60:c0:6b:6f:f0:cc:59:79:15:
86:1f:26:fe:7e:85:9d:92:5c:62:f5:6b:11:f3:87:
e3:06:b0:60:40:96:66:bf:25:db:90:39:f8:65:df:
c4:58:b2:b3:7b:93:23:2f:26:48:fd:98:29:47:12:
46:67:6f:6f:ce:8c:35:93:2a:b0:48:14:66:a6:84:
78:a3:b4:b3:2b:55:fd:b5:08:b3:ab:61:39:82:94:
bc:33:a0:c9:b0:cc:12:42:ad:65:7d:4a:bb:b2:e4:
1f:a1:b2:5e:6c:2c:2b:70:ec:ac:a4:f2:96:57:10:
0e:45:de:39:d0:78:1b:bc:46:db:60:27:eb:3a:90:
9c:92:9a:ee:65:51:ec:41:fe:45:e4:5e:1a:6e:52:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:27:1E:E6:ED:C0:F4:83:93:A1:70:30:6A:91:B6:50:43:BC:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4364db7a-1be5-345a-9e0a-201915c52972.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:61:dd:de:ab:3c:3a:53:7b:b5:28:d7:b6:ad:ad:3b:e0:e9:
7f:d7:5e:72:82:fb:90:a0:18:f9:a8:28:b8:af:e0:4a:4f:55:
44:49:3e:cc:25:47:87:23:df:49:46:da:c7:66:0d:b3:ea:2d:
c6:cd:38:a8:9d:e9:e7:da:81:68:48:95:17:a8:e4:96:ea:cd:
f1:a6:6b:ef:9a:14:bc:59:60:00:b6:1c:69:06:c3:a4:b3:d5:
8b:3b:51:3e:e2:63:77:3b:9c:97:32:6e:0b:2a:01:ec:c9:2b:
69:b7:5c:c4:d9:7f:46:c7:1b:97:e9:89:6f:25:3c:19:a3:f7:
f8:ea:d9:bd:a5:d0:cc:4b:20:ca:5f:e5:03:96:ec:f4:82:26:
38:26:ac:81:7e:bc:6b:8c:8b:7d:95:a8:dc:74:55:fa:46:fd:
bb:ee:64:e8:86:1e:5c:fe:ad:46:c8:af:6b:1c:25:50:da:ed:
46:36:5a:a4:83:53:2c:fd:fc:53:64:81:13:eb:e6:77:e6:3e:
49:06:28:7d:c7:9f:f0:8b:eb:00:00:15:ed:bb:03:5a:df:0a:
c5:b0:63:e2:01:a3:70:96:7d:cd:68:dd:99:89:0c:57:fc:27:
2b:24:73:0b:f6:4c:66:9e:b0:83:bd:98:58:31:27:f4:c5:4b:
c4:df:1d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:30 2025 by rpki-client on console.sobornost.net