Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa
File: 565d44ec-bec4-3ec2-934f-75404fa3de9f.roa (raw, json)
Hash identifier: XECgsz8Lx4lzY0uKt93mmqMh9SK2AVIc6Jl8kCIB2Qs=
Subject key identifier: 79:09:6D:40:8A:94:78:00:BF:5B:1A:ED:AC:4A:BD:C4:34:6D:EB:C3
Certificate issuer: /CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
Certificate serial: 010D0C9F4328584921840016DDC3A995F8856900
Authority key identifier: A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 3257
IP address blocks: 68.69.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:00:16:dd:c3:a9:95:f8:85:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=486bf432-5271-45a1-aad3-bd4db6548550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:97:5a:5f:0a:1e:19:a0:b7:3a:ca:52:cb:
0e:1b:19:f1:d0:b2:c6:ff:9c:ed:9c:37:5f:e3:04:
4c:3c:46:89:95:29:64:dc:dd:dc:14:0e:e9:8a:1c:
ca:ef:de:94:33:69:20:41:9e:9c:04:c9:1b:a1:37:
e6:c2:96:7c:53:07:0b:70:58:aa:ed:dd:3f:99:16:
a0:ac:c0:db:d6:c4:58:d3:74:df:ca:ee:e1:ab:6f:
5d:fb:ac:18:69:9f:34:67:0b:b5:18:da:f3:71:3d:
59:49:0b:d0:df:4d:47:81:85:87:af:be:7a:80:60:
03:db:f8:a1:50:73:05:4a:87:ea:de:cc:48:eb:6c:
18:d3:90:2b:ac:be:c3:d3:9b:3f:d9:26:d8:f2:cb:
e0:9c:1d:cc:6b:d7:63:3e:9f:51:a5:f7:a7:26:2a:
57:a6:57:71:1e:4b:d2:ee:d4:1e:f5:e6:b5:6e:99:
25:ce:b6:78:07:f0:ed:92:3c:16:ed:78:74:38:59:
01:86:b1:25:8f:c6:ed:ff:d0:34:a5:03:63:d4:ef:
8a:57:8a:bc:12:71:83:db:6f:fb:81:82:5f:10:a5:
28:02:37:55:30:52:1d:b8:42:e5:cd:f8:15:dd:91:
00:2f:01:02:c6:b7:60:32:0f:9f:d4:61:8b:38:bb:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:6D:40:8A:94:78:00:BF:5B:1A:ED:AC:4A:BD:C4:34:6D:EB:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl
X509v3 Authority Key Identifier:
keyid:A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.69.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:39:1d:e4:1f:b0:54:ee:e3:e4:64:4b:be:08:86:9f:c2:4e:
9b:9f:57:9c:6a:9c:cb:b7:3b:27:c9:ad:eb:40:1c:5e:d3:83:
e5:f8:dc:d0:8f:9e:ea:4b:16:6b:8f:e1:a0:0e:36:06:c2:ac:
72:d3:c1:fa:8f:b8:f7:c6:da:a4:01:9e:06:03:cc:2d:2c:90:
ec:64:b5:f1:1c:ee:35:06:78:3c:44:3a:27:7d:8b:8c:eb:d4:
0d:c5:f0:dc:c7:6b:3b:f7:71:d7:26:3d:bb:09:5f:82:7e:3c:
4a:68:14:9d:9d:c9:c6:a6:68:29:90:9f:8f:14:61:e0:8e:21:
81:f2:ee:8d:db:bd:9e:6d:38:46:34:78:12:55:ed:49:fb:46:
b0:8d:05:dd:7b:ba:26:83:61:c0:e3:ae:fc:95:ce:ae:f7:a9:
34:93:ef:f9:7e:d7:63:a3:6c:f4:4f:d5:e9:ae:82:8d:12:ed:
97:33:6c:a3:9e:14:57:a4:25:75:05:e1:23:31:de:55:66:c2:
39:4d:1e:04:ae:fc:f7:7b:10:ca:59:d7:3b:17:0d:7d:21:da:
01:37:2d:3f:8d:f6:b2:26:13:7c:26:e3:85:12:ed:a0:b5:42:
49:14:27:34:a8:8e:77:db:f3:c2:4b:3f:07:0f:9d:68:d1:b7:
8d:ce:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:14 2025 by rpki-client on console.sobornost.net