Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa
File: 3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa (raw, json)
Hash identifier: 4DEhiUSRdMxotztWC/VFvruojuGjatmuAjQX7gYR7BE=
Subject key identifier: 5A:98:75:3C:17:70:7D:97:12:CB:5C:9B:82:A2:7B:7F:E4:7F:18:EB
Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial: 010D0C9F43285849350EA58570A3F201ECF79B80
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 30698
IP address blocks: 209.221.240.0/24 maxlen: 24
209.221.241.0/24 maxlen: 24
209.221.242.0/24 maxlen: 24
209.221.243.0/24 maxlen: 24
209.221.244.0/24 maxlen: 24
209.221.245.0/24 maxlen: 24
209.221.246.0/24 maxlen: 24
209.221.247.0/24 maxlen: 24
209.221.248.0/24 maxlen: 24
209.221.249.0/24 maxlen: 24
209.221.250.0/24 maxlen: 24
209.221.251.0/24 maxlen: 24
209.221.252.0/24 maxlen: 24
209.221.253.0/24 maxlen: 24
216.213.48.0/24 maxlen: 24
216.213.49.0/24 maxlen: 24
216.213.50.0/24 maxlen: 24
216.213.51.0/24 maxlen: 24
216.213.56.0/24 maxlen: 24
216.213.57.0/24 maxlen: 24
216.213.58.0/24 maxlen: 24
216.213.59.0/24 maxlen: 24
216.213.60.0/24 maxlen: 24
216.213.61.0/24 maxlen: 24
216.213.62.0/24 maxlen: 24
216.213.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a5:85:70:a3:f2:01:ec:f7:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=3bce2374-9348-4096-982e-92e149e2e97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:c7:7c:df:40:5e:6b:33:45:30:74:6e:cd:
f0:c8:be:e6:e3:4a:44:1f:dd:e8:c5:0b:59:6b:45:
68:b5:94:59:59:e4:d6:5a:21:e0:e9:cd:42:07:47:
b3:05:cc:c2:ca:83:38:8a:33:7f:cb:b8:44:9f:52:
c3:78:4a:e0:da:16:79:ce:c5:6b:b0:a0:74:81:05:
ef:8f:35:32:71:67:72:0d:3b:68:b0:0b:3c:1e:bd:
75:84:60:63:6d:0b:fe:85:68:f7:b6:e4:57:de:4f:
a0:f5:6b:d2:57:b7:ab:8f:95:d3:d8:3c:7a:fa:c7:
a1:45:b6:23:74:ed:18:e9:cc:7d:9e:7a:9b:7c:9b:
eb:f2:53:53:4f:c8:98:99:18:e2:68:a4:0f:a5:54:
68:be:e3:9f:8b:23:3e:d8:3d:53:41:a0:80:e5:87:
e1:45:dd:7d:d9:07:83:4a:fa:5f:fe:50:b5:ce:20:
38:31:a7:89:b4:02:60:10:0e:29:22:b7:b9:f1:75:
d9:24:f4:ea:9a:10:e4:b9:8c:d7:38:31:63:e9:8b:
db:d5:db:81:f3:59:bb:83:52:f0:ae:8a:58:40:bb:
99:66:e8:ec:57:c6:ff:87:9a:e2:d3:a7:6c:7b:57:
cd:78:33:68:85:f2:c1:6e:ad:d8:e3:61:e1:df:c1:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:75:3C:17:70:7D:97:12:CB:5C:9B:82:A2:7B:7F:E4:7F:18:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
X509v3 Authority Key Identifier:
keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
sbgp-ipAddrBlock: critical
IPv4:
209.221.240.0-209.221.253.255
216.213.48.0/22
216.213.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:c2:c9:c9:16:50:74:6f:49:90:0a:f8:47:32:96:9b:c2:b3:
51:b4:aa:45:6b:e1:f0:10:af:b4:8b:95:c2:83:0a:53:fb:c7:
31:15:e1:11:0d:0c:90:a0:59:3d:7c:09:0d:1a:02:47:9d:81:
9f:28:12:09:3c:aa:52:1a:d8:f6:90:9b:7a:76:66:bb:0a:2e:
3e:ec:9a:6a:98:9f:a1:8b:a1:30:b1:77:38:a8:76:d6:b7:24:
c3:d0:d6:dc:ed:6d:84:86:bd:66:43:f1:c7:93:6a:96:22:d5:
b9:94:16:fc:c7:5c:01:59:8d:e9:a9:e7:9a:f4:20:e5:fb:cc:
e4:d3:10:51:32:bf:86:43:f1:40:08:4e:87:ad:a5:7d:6f:6c:
b3:0b:00:c7:9c:b5:1a:f4:20:88:4e:96:15:74:21:96:0d:53:
69:2a:2b:8f:8c:97:f8:02:7c:10:fb:94:6e:95:03:d9:6a:b6:
65:51:91:ff:af:07:45:ae:d0:f3:c9:b0:b9:9a:84:a2:37:33:
05:4d:59:14:1d:ee:39:51:dd:f6:81:91:8c:a8:ca:6b:89:6a:
54:f5:d3:e8:c0:8d:51:0e:77:53:27:e4:bb:61:cf:e9:b2:0e:
78:79:b3:3f:cf:7d:7a:76:7f:8e:f4:21:19:4a:d5:e4:5b:21:
71:ab:77:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:15 2025 by rpki-client on console.sobornost.net