Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa
File: 002e220d-5567-33ef-bd92-28d89dfe57f5.roa (raw, json)
Hash identifier: yTYl6xGmVxt4+G9chksZwcqZgAISXynOFcF6k5c9ej0=
Subject key identifier: 38:3B:DC:FB:47:B6:32:9F:64:61:23:8B:AC:52:54:F0:FF:0F:31:6A
Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial: 010D0C9F432858495EEEDA25644556CB7ABF0880
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa
Signing time: Mon 31 Mar 2025 13:00:59 +0000
ROA not before: Mon 31 Mar 2025 13:00:59 +0000
ROA not after: Sun 29 Jun 2025 13:00:59 +0000
asID: 14445
IP address blocks: 104.249.136.0/24 maxlen: 24
104.249.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:ee:da:25:64:45:56:cb:7a:bf:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
Validity
Not Before: Mar 31 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=eb5ae29a-12c3-4a37-bedc-dd70f068b5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:88:8e:04:f0:2d:12:32:13:90:25:42:16:b8:
2e:eb:92:59:b4:b7:19:a5:6f:90:f0:0c:f1:91:d0:
76:58:c6:8c:e5:bd:2c:f3:4f:65:57:67:8f:f8:28:
12:d9:2c:6e:55:d7:05:3d:92:12:6e:55:2d:c2:0f:
17:b6:10:78:89:e1:53:25:dd:63:ed:03:5f:8b:83:
2f:8c:31:30:0d:9b:8c:bb:53:5e:c1:9f:cf:d7:98:
ec:85:a6:58:e6:77:49:52:a8:a6:a8:19:20:51:12:
4a:8e:75:66:4e:8f:b9:21:01:2a:f9:ac:89:b9:8e:
a5:08:f9:4a:b7:e7:71:4e:6e:d8:c4:9b:88:5a:84:
d2:82:40:e9:90:74:55:5a:0b:ca:19:de:ed:7f:7a:
e9:be:d2:42:a5:9c:cc:4d:d0:d0:f2:fb:79:f8:3f:
9f:42:4c:12:66:77:bb:72:90:82:96:ed:e5:d1:01:
81:87:7f:94:98:e5:fd:88:bd:31:4f:c6:f6:60:df:
72:6a:6f:77:24:31:04:c8:69:cb:9a:57:d5:a5:88:
22:d9:bd:51:72:e3:71:86:38:05:ff:93:53:45:8c:
73:ef:05:a1:cc:69:00:43:9d:33:95:a4:e0:17:7d:
c8:4f:8d:b4:70:6d:01:16:ac:4b:cf:5b:ae:3d:b3:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3B:DC:FB:47:B6:32:9F:64:61:23:8B:AC:52:54:F0:FF:0F:31:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
X509v3 Authority Key Identifier:
keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.136.0/24
104.249.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:ea:b6:a9:c3:73:f0:5e:94:5a:98:87:09:19:b7:7a:aa:63:
34:0d:be:67:9d:f8:cf:34:79:f5:35:15:55:79:b2:af:26:19:
e5:c8:f3:8b:9c:6e:17:0d:fa:12:81:88:6a:09:76:b4:52:c9:
fd:89:7d:04:07:7f:27:80:5f:bb:bc:15:d0:31:8b:0f:9f:02:
45:33:d0:ff:13:ea:c1:d7:c1:9c:94:c1:a4:05:a7:1b:fa:2d:
5c:37:81:10:14:76:09:f4:96:77:b2:c8:c4:d9:10:4c:7b:f4:
85:3a:e0:29:61:cd:7d:da:e5:8f:29:de:cc:cb:dd:14:aa:28:
25:e4:eb:db:c8:36:57:b8:77:f1:e3:c7:1e:06:44:32:92:29:
ec:f2:8f:e6:77:1b:d8:68:c6:71:eb:26:9b:d6:5f:4d:07:20:
3c:01:53:48:a5:66:1f:a3:e6:33:41:92:c5:d5:57:3b:4b:0f:
36:1a:46:8b:13:3f:c7:a6:8d:9a:8e:13:3d:1e:17:f8:a5:97:
08:c8:ee:77:9a:e3:97:23:d9:fd:a7:d9:4c:41:6d:8e:0a:54:
43:0c:8a:d8:71:84:63:16:45:cd:25:ce:0c:6a:c4:16:42:d9:
7a:b9:86:f3:d6:a4:fb:86:99:cd:b4:13:54:be:b4:61:2b:59:
20:13:95:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:11 2025 by rpki-client on console.sobornost.net