Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa
File: a940db39-8b94-3a45-8f58-c597de6ac74a.roa (raw, json)
Hash identifier: qWO6RJXhuAksvftwSzX+DzKujC5pk2e2MR6sgDPhluw=
Subject key identifier: 72:65:85:26:5E:54:EB:8E:F3:29:6F:0A:9A:51:F0:AD:A7:D6:6D:F5
Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial: 010D0C9F43285849088167056F8A600AAA9E16E4
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 399809
IP address blocks: 64.29.138.0/24 maxlen: 24
2607:f3a0:a00a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:67:05:6f:8a:60:0a:aa:9e:16:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=c413199c-0f1a-4fb1-9dd4-ca879ec40660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:4b:f4:72:bd:2e:30:8e:62:26:35:fa:6e:
32:87:57:1f:78:8c:1f:38:5d:22:66:ef:6a:52:fa:
54:98:fe:95:92:d5:eb:43:93:39:72:e6:e4:22:02:
27:2b:ec:17:4c:85:1a:93:15:48:bc:33:75:22:12:
4f:7f:9c:87:af:04:32:a1:57:38:e5:1f:2e:86:7b:
de:48:fa:c0:2a:5c:0d:36:9e:7b:6d:c3:f1:1e:89:
52:81:a5:da:08:71:2d:67:05:1c:ba:b1:80:d0:03:
3b:61:99:4b:f3:17:63:37:ac:09:fc:fc:01:38:ab:
02:28:99:7b:56:40:42:4a:24:b1:e1:a8:ad:34:77:
5c:69:52:ef:3a:a2:0d:be:4f:60:fa:a0:93:45:ba:
b8:06:ce:e7:a9:21:79:c4:0f:2f:85:61:5d:b8:47:
a2:95:d6:94:4c:03:72:5e:fa:e6:b0:d7:77:35:96:
95:a5:3b:7c:1a:0f:b5:fa:0c:ef:33:fe:19:f2:91:
68:97:c9:52:d7:28:77:bd:4b:02:38:d3:c2:05:31:
6e:b3:73:82:da:61:23:99:89:d0:e0:76:99:55:3a:
ab:e8:15:1a:d5:7f:d2:92:fe:91:96:b8:df:58:e8:
ff:d4:c9:1c:5c:25:7c:43:68:8a:72:cb:3a:f7:c1:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:85:26:5E:54:EB:8E:F3:29:6F:0A:9A:51:F0:AD:A7:D6:6D:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
X509v3 Authority Key Identifier:
keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.138.0/24
IPv6:
2607:f3a0:a00a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:52:7a:5c:3c:1a:4f:77:89:e4:b4:fd:33:ad:cd:c7:d6:0c:
7a:b6:7b:20:74:96:ab:70:d1:6b:e3:5f:5f:6e:96:fb:f1:4e:
c9:80:8f:7f:32:99:f0:22:97:95:53:c7:05:e4:da:bb:3d:97:
5f:b2:b9:3a:94:40:82:d8:cd:62:f5:d7:05:e3:c1:4a:f1:25:
7d:b8:f9:d7:33:5f:a7:9c:c1:02:4d:d0:37:12:c6:00:19:cb:
95:a8:b2:ac:6c:5c:a3:61:86:8c:17:45:72:b4:b0:97:52:ff:
fc:3d:0a:54:08:53:b5:e7:93:41:9b:61:f9:56:91:de:95:e9:
4c:e1:3a:76:77:72:96:e7:ec:80:68:d0:ac:86:2e:e1:70:82:
e3:b5:1e:ee:da:5d:f1:84:2e:ef:52:d6:5f:8f:f3:5b:a4:69:
7a:43:75:7f:ca:60:d3:6f:c0:c6:85:79:31:80:92:84:7a:12:
06:8a:58:0c:56:a0:77:d4:85:06:15:71:d8:55:bf:aa:b8:eb:
bd:ee:9b:7a:6f:7c:b3:e9:f8:55:c2:59:59:55:3f:a6:a6:7b:
ed:89:9e:3a:06:d9:7f:0f:ce:08:a4:b3:91:d4:3c:e5:1b:85:
e3:93:14:34:4b:12:0a:e1:1a:e6:d9:43:cf:5b:0f:f1:86:a3:
d6:0f:51:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:05 2025 by rpki-client on console.sobornost.net