Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa
File: 1b852b6c-9aa4-3df4-a821-ac1748d70801.roa (raw, json)
Hash identifier: eXB+vyp2JW9bRHkO85ie+swO8HU6t2w8KGd45xES1v0=
Subject key identifier: F1:03:64:3F:88:5E:55:CA:FC:F4:B4:EB:9B:A3:87:17:8C:11:D6:1B
Certificate issuer: /CN=a91fff12-f74d-4a80-9a5d-f225534bc527
Certificate serial: 010D0C9F4328584961B98E890D77531F89876180
Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 46595
IP address blocks: 64.35.144.0/20 maxlen: 24
104.37.76.0/23 maxlen: 24
104.37.78.0/24 maxlen: 24
174.137.64.0/20 maxlen: 24
216.255.192.0/19 maxlen: 24
2600:b000::/28 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:8e:89:0d:77:53:1f:89:87:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=32ffcc67-5e6a-4d9e-a834-c1f8fbf97595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c3:32:39:ca:85:d9:00:bf:47:77:93:2e:82:
73:08:96:35:ee:64:7d:d2:d2:b4:f5:ad:2e:d5:7c:
e5:b9:5a:75:b8:77:96:34:44:4f:3f:61:ad:a0:e4:
88:5e:cd:cc:55:76:cd:da:78:b4:98:4c:e8:87:a8:
ec:6b:24:79:b7:5b:d0:84:fa:1e:27:b6:dd:4c:11:
b3:49:69:71:63:1b:17:73:89:2c:12:9b:87:73:83:
f0:fb:4d:1c:fe:ad:2c:29:7f:b7:d5:de:ac:cb:0c:
b4:b6:4a:bd:af:45:26:18:b3:2d:c4:82:8d:70:e0:
b1:bd:3c:d5:08:a7:40:44:72:d6:92:fe:4c:39:f0:
1b:56:6c:78:e4:a9:09:44:2c:9c:28:96:3b:85:20:
9c:d7:2f:d3:ea:62:e5:c1:aa:80:24:ee:5f:73:c7:
2d:e3:fa:b2:04:e7:b2:fd:44:5b:a8:7e:dd:9a:c9:
d6:a4:27:a7:94:6a:9b:6e:0e:cd:0c:86:0f:46:58:
8a:c5:bd:3d:18:d4:4c:fe:01:fe:3b:38:27:15:e0:
e6:67:3d:27:4a:7f:20:6c:af:b0:f8:06:47:4f:5d:
05:01:81:3c:8c:db:78:35:f2:84:69:98:6b:fc:4a:
da:26:c3:88:ef:d0:ae:fb:7b:57:62:c5:a0:11:42:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:03:64:3F:88:5E:55:CA:FC:F4:B4:EB:9B:A3:87:17:8C:11:D6:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/1b852b6c-9aa4-3df4-a821-ac1748d70801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl
X509v3 Authority Key Identifier:
keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
sbgp-ipAddrBlock: critical
IPv4:
64.35.144.0/20
104.37.76.0-104.37.78.255
174.137.64.0/20
216.255.192.0/19
IPv6:
2600:b000::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:74:6b:df:75:53:6b:46:33:c9:0e:8c:4a:5d:19:8a:da:a7:
84:9c:36:d6:f5:56:a9:d9:7a:8c:b6:ee:7c:4a:ce:82:0c:a7:
63:1d:e9:e4:7e:6a:71:55:75:4f:89:e7:2a:c3:d5:e6:9d:8a:
3b:9d:f4:da:a7:0c:66:7c:e7:bf:fd:80:c3:b1:11:68:09:60:
f5:55:7c:55:18:fc:41:26:62:21:d5:94:07:3f:70:c8:12:ec:
59:59:fc:a5:e0:93:67:4b:e8:b1:21:23:34:cc:88:5f:7f:04:
84:ff:36:37:ab:4b:a7:88:6b:72:17:57:fb:41:76:5e:6b:7e:
fc:c3:b3:ca:5c:b5:a4:ea:8e:3e:11:7c:5a:45:22:f1:1a:97:
11:70:a5:97:9e:94:67:2b:04:da:65:4f:a5:1d:6d:11:6b:4e:
76:53:c6:bd:19:14:43:5b:97:f1:19:74:96:ff:06:16:3c:06:
c5:5b:3e:f7:67:ae:13:31:80:1a:b6:c8:02:ec:52:84:10:d5:
33:8f:0d:a1:d3:c0:48:e7:fb:8b:80:c9:e3:f7:d5:27:a8:4c:
6a:c3:63:f8:e4:be:c8:8e:67:a6:74:15:35:78:dd:f6:6e:ee:
eb:70:bb:2e:66:6e:85:b1:44:7e:0e:17:bf:dc:ef:ba:8e:2c:
60:6e:45:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net