Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa
File: df6ffceb-3664-34d8-8a96-01aafc7628e4.roa (raw, json)
Hash identifier: X+4JpwngCxqP9jngNuxMSA2fTZVCAkr+ogzzQxD+upk=
Subject key identifier: 9E:60:84:87:C4:9B:52:02:CA:4C:70:56:E3:B0:93:53:2F:C0:56:31
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F432858492E13C62F57F620BFFB0FD700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 142.173.0.0/20 maxlen: 20
142.173.16.0/20 maxlen: 20
142.173.64.0/20 maxlen: 20
142.173.80.0/20 maxlen: 20
142.173.112.0/20 maxlen: 20
142.173.128.0/20 maxlen: 20
142.173.144.0/20 maxlen: 20
142.173.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:c6:2f:57:f6:20:bf:fb:0f:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=cf1b1d16-a8a0-409f-bd61-279c3c8b7239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:9f:72:1c:40:ae:66:77:a1:92:a4:8c:c7:
43:07:5a:6c:b8:9c:d0:24:79:07:59:27:93:94:a8:
cc:56:50:e4:cf:f3:3e:2f:3e:95:46:b0:1d:2f:bb:
f1:e7:f9:f5:bc:fe:82:d3:14:f8:14:c1:8c:c9:69:
a1:95:98:c3:a7:13:cb:48:7a:a8:6b:35:d5:de:e5:
d8:15:36:25:be:41:ed:29:92:1d:59:81:1a:13:51:
e3:17:09:3b:2d:d1:0d:8a:4b:b9:a0:67:c8:7e:24:
02:e4:20:09:15:ac:8a:8a:b7:d4:c8:c8:d2:4f:e8:
e6:ce:d1:3b:d9:4f:50:dd:b6:2a:59:03:20:ae:de:
74:24:8f:db:af:3c:fa:41:1c:ba:72:e6:36:d5:f6:
b2:b1:1a:0c:61:fd:3c:08:49:59:64:cf:89:6b:18:
46:b3:8a:b9:e6:24:22:ef:12:bb:75:b8:2c:b5:09:
d1:36:c1:81:57:25:9b:9a:2c:21:b9:d6:94:48:3b:
79:9d:33:5d:35:3a:60:f9:31:3a:2e:eb:00:fe:3a:
c6:af:31:6c:ab:c3:d5:b5:b2:7e:39:81:85:68:4c:
99:82:06:5c:c5:01:3b:84:b4:66:9e:cf:19:99:c7:
3b:73:1e:d7:4e:e5:9a:fd:7d:fb:0e:1a:20:68:03:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:60:84:87:C4:9B:52:02:CA:4C:70:56:E3:B0:93:53:2F:C0:56:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
142.173.0.0/19
142.173.64.0/19
142.173.112.0-142.173.159.255
142.173.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:d8:39:e1:9d:b3:4b:06:8f:4c:09:b3:4a:55:0d:63:e7:a7:
48:b1:96:a2:d9:e7:54:89:d9:c4:90:d0:2f:7f:b8:7f:7a:95:
ff:47:8a:e1:81:c6:b3:de:2a:29:7b:1b:f3:84:be:fa:af:0d:
5b:89:ff:a5:58:c2:d2:ff:ff:f5:ac:3e:f8:d2:f3:3e:98:ca:
4e:62:8e:ab:9e:cb:1f:65:1d:7e:4b:6e:91:d4:dd:30:6b:a0:
7f:ea:ae:ea:9f:e8:bc:6c:1f:5a:2b:17:e1:9f:21:a5:20:45:
db:dd:41:af:fe:3b:a5:16:92:b9:ec:14:87:3a:db:6c:1b:9d:
3f:11:5c:ae:0d:84:4b:5c:12:18:0e:34:17:4c:e6:13:57:6d:
1c:c9:33:c3:ec:11:4b:ae:b1:49:36:65:96:f8:f4:76:c3:74:
93:7c:dc:1c:00:63:26:ed:ff:c9:19:36:59:f1:76:69:a6:a3:
8d:a8:d4:a0:1e:50:25:d2:96:cd:58:24:49:e3:ef:3a:9e:f2:
c1:4e:68:1d:3c:05:08:d2:f0:7c:de:34:57:4e:95:4a:23:50:
a4:5f:ec:5c:3c:ca:34:fb:b6:00:e4:53:7d:59:f5:58:fb:b0:
9d:d3:08:e4:4d:80:e7:27:63:f0:c2:b3:88:ca:43:cf:3c:39:
0b:86:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:43 2025 by rpki-client on console.sobornost.net