Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa
File: 68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa (raw, json)
Hash identifier: DLdgB3p7REHrxmSs5eMVjQb23sY4vb1V9jyIwzzVGlM=
Subject key identifier: 8B:F7:FC:1F:06:F4:DB:23:D2:C4:E2:72:9D:9D:B1:92:14:94:39:16
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F43285849780F0C22AC39B00264B8AC40
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 203724
IP address blocks: 161.69.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:0c:22:ac:39:b0:02:64:b8:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=e8165bed-d3dc-42f7-806a-84ae89e4d960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:4c:f0:c4:4d:63:21:46:1d:73:5d:4e:7f:
d2:9c:a4:cc:87:ff:c6:c3:3d:93:3d:7b:d6:df:09:
98:68:8e:6b:d0:82:49:6c:45:cb:89:ff:54:fb:12:
f8:9c:96:90:46:7c:9d:7c:2b:ea:38:91:77:bc:8e:
b6:2f:50:71:7d:96:27:c6:de:b7:93:3c:88:a7:33:
e5:90:bd:7b:81:4e:dd:0e:11:97:94:ca:bc:98:11:
d4:3e:0b:0d:77:62:a5:a4:41:6c:3e:3e:94:44:45:
45:1b:5a:35:01:5b:16:ab:b0:cc:6c:c1:e5:14:45:
23:c1:62:a3:3c:ef:e0:7c:13:e1:52:2d:e7:c5:25:
7a:fb:f9:2f:41:96:b0:3a:80:4a:e4:65:ce:33:16:
d5:0d:90:c0:53:b3:20:4a:37:81:76:09:33:c2:1c:
15:7a:bb:15:55:d4:16:e3:54:89:5c:eb:da:60:8b:
93:3a:33:be:1c:12:e5:9f:4b:b2:0c:4b:dd:3e:a0:
e7:29:92:b0:01:fa:0c:65:cb:ff:c5:5b:ed:7e:e5:
88:89:b1:81:36:d8:05:c4:e0:2e:e9:fe:f3:ff:73:
22:a6:b9:4a:ad:97:0c:7d:d2:d2:19:c5:61:ce:e7:
21:4a:54:b1:c6:84:d6:a8:62:b6:3f:65:30:b7:13:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F7:FC:1F:06:F4:DB:23:D2:C4:E2:72:9D:9D:B1:92:14:94:39:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:30:7f:f9:3d:98:49:aa:d4:73:58:82:2f:41:34:06:ef:c5:
06:99:54:39:43:64:66:73:04:35:fc:ca:d0:72:d9:ea:fe:93:
a0:7f:a8:1c:fb:a0:0e:8d:52:34:75:af:62:75:91:71:ba:79:
14:d2:34:ac:ca:00:0c:66:99:a3:65:e1:29:71:0d:38:4f:03:
7d:03:5d:91:2c:9e:8d:b8:07:d4:a5:8d:77:09:77:0a:9c:87:
7c:50:eb:ff:90:06:6c:5f:eb:31:e8:2a:36:ea:c2:c1:51:0b:
41:fd:00:e5:88:fa:47:84:83:19:46:ed:6c:f1:91:93:84:ba:
5a:2f:5e:cf:50:87:cf:74:83:ec:bb:00:d1:01:f9:f1:53:1e:
0f:c9:23:87:83:61:26:3f:bc:f2:1f:02:6c:d1:6e:e6:af:d7:
ab:68:59:2b:aa:23:6e:6b:30:44:6b:15:48:99:da:f7:88:54:
70:90:89:3d:ab:0b:f2:1d:cf:ff:86:39:36:ed:10:8e:1b:3f:
0f:f4:e2:3e:92:aa:17:a7:2b:d6:49:b7:40:28:f5:bb:e3:f1:
15:66:d1:ba:dc:eb:6a:29:99:03:d4:13:a1:c9:c4:d4:c3:e8:
b7:4d:0b:f1:df:5c:c7:cb:80:35:ad:47:b4:16:bb:aa:e6:6d:
12:3e:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:05 2025 by rpki-client on console.sobornost.net