Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa
File: 401073da-de78-3d31-84e4-3349facc1d23.roa (raw, json)
Hash identifier: FmCWAyC86UDFSGbJKp4NwiE2GSUOkEa0rxuQ73DdGso=
Subject key identifier: AF:31:CE:E3:AD:16:A9:CF:74:42:31:A9:71:79:88:1F:DC:50:FB:8D
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F43285849780F0594D8B30E0B8E547400
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 203724
IP address blocks: 161.69.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:05:94:d8:b3:0e:0b:8e:54:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=23dec212-0580-43d6-b14f-059ef32b82f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4b:0a:81:ac:d3:5e:c8:4f:e8:a9:08:b3:07:
e1:59:31:6c:86:b7:3c:38:30:26:d5:2d:91:65:c2:
9a:d0:37:6d:fb:15:07:ae:50:29:71:65:f6:47:a6:
f4:c7:38:31:87:31:77:eb:46:11:62:33:e4:e1:26:
bf:81:44:ac:17:ea:95:8c:48:0b:1b:d9:14:db:10:
00:54:cf:4c:3c:e9:1d:7a:ba:14:19:a8:ea:e4:74:
98:17:7d:62:3b:18:50:66:76:71:f5:e2:6e:a1:fc:
f0:76:dd:9c:16:97:37:c1:66:af:dc:a4:06:8a:aa:
84:95:14:0d:a8:a4:9c:45:ec:69:8c:65:d9:80:d9:
e4:66:25:fc:98:73:b3:ae:9f:1c:0e:b2:6b:55:89:
99:49:0e:05:59:87:37:3b:df:89:fe:6a:0e:f0:ea:
bc:0f:d5:05:da:3a:4b:15:a0:de:7f:0b:4d:09:31:
30:ca:b2:7e:18:cd:32:87:a2:4e:2a:3a:8f:20:5c:
06:16:f8:df:d4:e8:b0:d5:02:7a:15:86:20:25:5f:
a1:f7:b6:57:2b:48:2d:a5:6e:aa:cf:28:78:4b:f9:
c9:30:e0:e2:1d:64:cc:67:6b:32:99:99:29:8d:63:
15:6d:13:07:17:39:b8:c5:29:05:df:51:54:6a:37:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:31:CE:E3:AD:16:A9:CF:74:42:31:A9:71:79:88:1F:DC:50:FB:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:78:6e:4b:4b:47:35:a7:41:6b:5a:5c:1b:73:d6:91:39:96:
78:43:99:4b:1b:82:38:47:ab:5d:2a:04:be:c1:d5:4c:cf:3c:
4a:4f:3e:32:ae:4b:d5:f4:01:be:22:ed:89:3b:ed:77:7a:8f:
9c:79:ba:7e:98:f3:52:47:fd:16:46:2b:93:dd:da:99:43:da:
46:9b:7e:24:62:19:fe:a6:02:e7:e6:dc:f9:6f:9c:62:29:be:
ea:4a:73:7f:7b:81:bf:06:1c:82:19:af:95:a8:b4:40:ce:e8:
b1:22:6e:c2:d5:ed:fa:cf:27:26:4b:5e:6c:c0:ec:79:49:68:
e9:6a:3a:76:ee:bf:9e:5b:a4:cd:57:b0:75:ae:50:c9:43:8d:
c6:b3:6b:e6:32:9d:f4:1c:bd:be:10:b4:e3:45:0c:25:06:70:
4e:59:c5:c0:0d:a7:4c:b2:94:24:ca:e5:b9:7f:31:84:51:97:
ef:6d:85:64:c5:ea:d0:83:31:f1:d6:88:af:21:1b:38:e1:00:
e5:b6:f3:a0:28:30:1b:30:5b:db:9f:d5:5a:3b:4a:70:f2:9d:
6c:1d:1d:3b:f6:06:45:3c:dd:a8:8a:e5:47:02:65:ec:60:bc:
54:4a:55:e3:ca:70:6c:9a:50:68:ee:5b:c5:16:6b:f1:fc:80:
48:b2:50:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:05 2025 by rpki-client on console.sobornost.net