Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/5e348348-aeea-3469-b4cb-db42afab4fb3.roa
File: 5e348348-aeea-3469-b4cb-db42afab4fb3.roa (raw, json)
Hash identifier: mpvtBl+/JA7rEvRWUg0q7AyRfYZzS0dHWz7UDBI53YE=
Subject key identifier: 57:AB:23:A7:B9:D3:B2:42:FE:E5:D1:B1:E4:61:DB:C5:12:50:76:DC
Certificate issuer: /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Certificate serial: 010D0C9F432858497AD9BAAC8D131D41040C5500
Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/5e348348-aeea-3469-b4cb-db42afab4fb3.roa
Signing time: Thu 10 Apr 2025 13:00:59 +0000
ROA not before: Thu 10 Apr 2025 13:00:59 +0000
ROA not after: Wed 09 Jul 2025 13:00:59 +0000
asID: 11961
IP address blocks: 64.89.208.0/20 maxlen: 24
72.250.128.0/19 maxlen: 24
108.59.112.0/20 maxlen: 24
144.86.208.0/20 maxlen: 24
216.228.32.0/19 maxlen: 24
2607:8380::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7a:d9:ba:ac:8d:13:1d:41:04:0c:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Validity
Not Before: Apr 10 13:00:59 2025 GMT
Not After : Jul 9 13:00:59 2025 GMT
Subject: CN=04cea68a-d906-48f8-973f-eb4795de99e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:48:94:3b:96:7a:03:cd:f7:f9:84:fa:e7:
81:22:45:79:d9:c4:f5:7b:73:0e:b8:34:82:85:ac:
77:c7:6e:a1:5e:05:d0:cb:9d:89:65:56:1d:20:81:
7e:dd:b4:cc:16:52:c1:0f:34:05:c9:00:cb:28:57:
93:a5:bf:09:99:a9:19:38:d1:1e:a6:ef:af:af:e1:
11:49:0c:28:79:8c:20:9e:80:f2:0d:74:4a:36:7f:
2d:0d:1f:30:9a:e1:a3:44:f3:e2:be:c9:8a:38:66:
c8:5a:dd:f9:68:0e:af:18:d8:00:bb:b7:6a:1a:a2:
b0:31:07:37:bd:af:37:00:30:b8:fb:26:2e:32:a2:
33:23:d1:73:84:fb:82:4c:bb:19:a2:8b:36:fb:72:
3d:a7:71:0e:0a:61:73:59:1c:6f:1e:fc:34:5e:dc:
a4:22:bb:36:72:34:4c:67:79:28:23:52:81:cd:b1:
b7:de:f8:98:05:45:23:5b:19:d3:db:b9:43:a4:4c:
87:c2:d1:70:78:36:90:39:5c:87:94:47:c0:08:91:
a7:6f:17:3e:cd:43:4b:5e:54:15:c9:31:a5:11:fe:
7a:4b:49:59:81:39:e6:62:ee:a3:44:29:3f:0b:e7:
40:c1:be:3e:70:4c:3e:a8:47:51:f3:2f:4a:58:35:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AB:23:A7:B9:D3:B2:42:FE:E5:D1:B1:E4:61:DB:C5:12:50:76:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/5e348348-aeea-3469-b4cb-db42afab4fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl
X509v3 Authority Key Identifier:
keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
sbgp-ipAddrBlock: critical
IPv4:
64.89.208.0/20
72.250.128.0/19
108.59.112.0/20
144.86.208.0/20
216.228.32.0/19
IPv6:
2607:8380::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d7:f9:df:68:41:f7:0a:91:0a:80:80:78:c4:36:3a:fe:77:2c:
50:6a:a2:a0:a8:c3:49:6e:48:80:53:43:c9:0b:a8:a9:64:3e:
65:a5:c0:20:5b:46:ed:68:df:72:04:8c:c2:fc:2a:71:53:9f:
25:f2:18:04:42:b4:c5:ab:4b:76:e0:80:16:e7:2f:79:c4:d6:
9f:11:f8:51:a7:03:e6:0b:27:77:f2:da:37:63:ab:ea:1e:f1:
61:78:98:2d:67:b5:c1:91:6b:58:ab:85:90:9f:8f:74:60:ca:
d3:fc:6e:ce:a2:3d:0b:df:9e:27:b0:fe:04:93:ab:6f:46:0a:
ee:aa:86:a9:cf:06:a8:8b:e0:d5:58:70:f2:9d:7d:2a:7b:92:
ab:c4:5a:46:27:0a:be:e6:ff:0c:85:a1:c6:fa:ba:e9:b9:bc:
f9:3b:3f:5a:b9:23:79:aa:ef:11:04:7f:0d:0b:70:25:b6:9d:
61:74:cc:55:72:98:ce:52:2c:8f:93:ac:c0:9a:ad:4d:75:26:
fe:68:37:c9:9e:4f:d3:1d:9a:73:65:5c:6b:55:bd:6a:df:a0:
bb:b5:41:c9:29:32:b1:46:52:42:a8:70:fe:1c:0f:5b:41:90:
09:0a:69:00:19:87:de:78:bc:8e:17:1d:79:96:24:35:cc:cf:
bc:c0:91:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:15 2025 by rpki-client on console.sobornost.net