Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aab9b9da-eb74-3848-907d-b793e7a1fa6b.roa
File: aab9b9da-eb74-3848-907d-b793e7a1fa6b.roa (raw, json)
Hash identifier: JfbZOiWq7EYSbPNWp23Z3sTLtSLgZ2fjTObK9muxWdw=
Subject key identifier: 73:F0:13:F6:B8:5B:D6:D1:6A:3B:9A:97:17:67:84:6B:D4:5B:78:78
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848DB438A079B4F948DB7D410E0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aab9b9da-eb74-3848-907d-b793e7a1fa6b.roa
Signing time: Wed 12 Feb 2025 09:05:00 +0000
ROA not before: Wed 12 Feb 2025 09:05:00 +0000
ROA not after: Tue 13 May 2025 08:05:00 +0000
asID: 64267
IP address blocks: 139.180.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:43:8a:07:9b:4f:94:8d:b7:d4:10:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 12 09:05:00 2025 GMT
Not After : May 13 08:05:00 2025 GMT
Subject: CN=8a914355-2b6e-452a-aa63-399577f6cc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:9c:a6:a7:dc:34:c2:73:92:bf:41:10:27:
44:9b:f8:0e:1b:b1:aa:df:ae:af:28:14:76:91:2c:
38:af:ad:8e:4f:f1:7b:e2:66:ea:3e:85:fe:59:4c:
b1:57:32:86:50:fd:e4:7b:40:ab:59:65:25:ac:38:
91:56:6f:77:d9:45:09:81:22:84:a8:1b:40:0f:de:
18:ba:33:91:c8:50:4e:2c:c7:6c:2f:1c:da:4e:5a:
a5:6b:27:73:1d:6c:47:ef:9f:fc:fe:ab:b9:63:81:
db:e0:44:aa:ab:49:1a:cc:3a:37:fa:89:86:55:2f:
5c:35:73:dd:a8:08:03:01:67:21:4a:3f:c1:42:c7:
fd:73:44:ac:b4:d9:e7:a0:74:0d:21:02:ac:a4:15:
0b:73:cd:47:7f:c9:9e:99:45:11:8e:a5:1e:30:00:
89:bb:2f:fc:3f:fd:bf:e5:a4:3b:d5:95:88:fd:b1:
a0:2d:be:49:c3:47:41:7f:ee:65:73:bc:2a:2d:f8:
b7:f6:27:b9:fe:66:01:87:ac:80:e6:9d:60:68:9d:
b4:e6:f3:70:c9:73:6e:de:81:cb:0e:a8:43:b2:e2:
7e:5e:22:c4:93:08:75:3a:53:72:87:e9:4a:d0:42:
7f:88:0b:00:b8:22:14:68:f8:17:29:bd:63:e7:50:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F0:13:F6:B8:5B:D6:D1:6A:3B:9A:97:17:67:84:6B:D4:5B:78:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aab9b9da-eb74-3848-907d-b793e7a1fa6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
139.180.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:92:43:b2:03:28:2f:b6:73:d3:85:5b:88:67:7b:6e:ef:d3:
73:9b:13:58:7c:34:50:50:c3:ac:49:ce:ed:b6:73:a5:b6:12:
72:f7:00:a5:b4:f5:10:77:4a:7b:58:e3:01:d7:e4:14:a8:19:
e7:98:05:bb:54:f4:96:45:25:ae:50:ea:c2:02:34:ba:f2:75:
3a:ed:28:ac:79:38:2b:39:24:17:50:83:2f:a0:94:4c:88:15:
fb:29:8d:e4:69:dc:dc:be:38:33:1f:14:d9:3d:bc:df:ac:9f:
16:f7:50:11:02:34:f1:02:3b:66:63:cd:93:bf:5a:63:c3:a4:
67:46:dd:60:0f:41:b0:de:dd:4b:c5:e7:16:95:3b:81:ce:54:
ba:95:8e:21:c2:e8:79:dc:12:4e:48:e1:c2:12:9d:94:06:cb:
c3:87:4a:49:b2:a9:f8:1a:2b:3e:23:70:33:55:c3:86:cd:7c:
5c:87:03:9d:ff:03:ec:f9:9e:68:33:13:cc:6c:4b:4b:6a:a6:
04:d5:13:59:ae:6e:9c:af:33:a1:6d:0b:aa:1e:ae:86:d1:a3:
86:94:9a:72:94:57:1f:33:22:e3:7a:2e:a3:11:f0:73:c0:b1:
86:16:17:10:15:08:4b:c2:0b:2c:38:71:fe:3b:68:7d:c5:61:
56:5b:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:39 2025 by rpki-client on console.sobornost.net