Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f070a6f3-baca-3377-b676-79ab48b2a038.roa
File: f070a6f3-baca-3377-b676-79ab48b2a038.roa (raw, json)
Hash identifier: YUeqGaHFVKEXtWix8Gk4vbShJpcuJTDPcZk8TDrRWEg=
Subject key identifier: C6:2A:F9:CD:A7:3C:CD:7F:C2:5E:0F:26:DA:5A:29:CB:53:60:1D:BA
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C84C0210A57057093197E480
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f070a6f3-baca-3377-b676-79ab48b2a038.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 36492
IP address blocks: 64.9.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:02:10:a5:70:57:09:31:97:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=a985b5d1-8ff7-4f9f-81d2-ddd95cbfa399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:dc:1f:67:e7:1b:77:06:c1:d6:ba:29:f5:
40:9f:42:56:3a:7c:74:6b:96:48:c4:98:b9:71:ae:
9e:5f:01:88:94:9f:9e:9c:b7:45:58:83:52:8d:00:
80:99:c5:8a:33:31:6c:80:fc:29:19:4d:26:f4:16:
4a:e5:3c:ff:b6:f6:ff:f9:b6:c3:a3:f6:ed:e5:68:
0f:82:4f:d1:ab:0b:4f:31:27:7c:b9:4a:09:9c:52:
5a:4b:5c:f2:d0:30:29:c7:7e:89:19:4e:b9:d4:13:
53:53:26:e0:2f:31:30:a8:21:6d:ff:1e:46:22:6c:
aa:b4:83:17:57:fc:0f:05:a9:7c:40:a2:08:a6:95:
69:b7:19:af:d6:de:19:ee:ec:b0:f2:59:4a:16:1f:
2e:6f:0e:33:87:1b:37:20:2e:8d:ed:8f:06:4f:c0:
57:2b:e6:d4:8b:e6:d8:db:09:16:bd:c8:c0:01:96:
02:34:46:d4:05:2e:d7:90:7e:31:5c:f8:ab:66:67:
80:b3:a4:da:fb:ea:0a:0f:f6:24:89:9b:89:c9:47:
19:f6:1a:2f:c1:1c:d4:c4:cd:93:a3:ee:e4:de:f9:
01:85:9c:ab:25:dc:b6:1b:ea:89:f9:93:c1:7d:d1:
fa:d0:92:08:81:ba:95:f9:8c:2f:99:52:22:91:de:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2A:F9:CD:A7:3C:CD:7F:C2:5E:0F:26:DA:5A:29:CB:53:60:1D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f070a6f3-baca-3377-b676-79ab48b2a038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
64.9.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:c3:7c:14:e3:09:3b:a0:d3:b3:9a:b0:60:bf:a6:3c:9d:58:
bd:0a:b4:11:63:a0:1e:9a:50:70:35:65:b4:8a:05:3a:c5:77:
e7:7b:0f:7f:bf:f9:f6:07:f7:1f:16:21:dc:f3:4e:61:eb:b5:
bf:97:74:fc:36:8b:9a:fa:5e:08:8c:38:e9:cd:cf:b8:d7:7a:
4e:5c:35:63:da:71:f1:5b:17:74:66:ee:9d:06:c0:0f:ea:d5:
0c:ff:88:bf:21:f1:8e:0c:b5:08:05:8d:6e:fb:8c:3a:ac:7c:
8f:68:bc:4c:11:80:34:f6:c6:53:d6:c2:3c:f3:63:b9:f9:83:
43:8b:84:31:09:d6:0e:b7:2d:d9:23:f8:90:3d:40:96:a7:67:
f1:60:b2:ba:7d:e7:64:37:0a:15:97:87:ea:ee:7e:70:bd:90:
a4:b4:da:5c:80:e2:75:56:f1:4e:6a:56:64:a2:5f:72:80:1c:
60:ee:74:b6:98:6e:9e:8a:a5:1e:35:14:05:41:00:39:04:32:
29:f9:f6:64:15:d6:2a:f2:45:ee:1c:64:54:cc:40:be:91:df:
63:19:4a:48:22:c1:da:b6:86:22:aa:16:fe:d3:14:a2:33:cd:
51:04:9f:57:a5:7d:e8:9f:ec:10:b8:8f:e3:16:47:88:6c:17:
68:61:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:45 2025 by rpki-client on console.sobornost.net