Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa
File: 3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa (raw, json)
Hash identifier: IuQTy/a4FxyDwBDzPOqBJ+zKWHto+o3oW+qN3AHILtE=
Subject key identifier: 34:7D:4D:20:72:67:F1:B9:42:5E:2F:1D:21:75:19:D5:BC:35:25:6D
Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
Certificate serial: 010D0C9F43285848E86660AAAE520A858EABC740
Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 16509
IP address blocks: 199.30.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:60:aa:ae:52:0a:85:8e:ab:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=9176723a-e300-4c59-b766-70d41be0b73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:f5:d4:e4:3d:55:ef:18:44:6c:09:32:db:
bc:1d:0e:30:fc:59:08:28:87:47:18:84:14:2e:2f:
de:26:59:90:68:1c:33:38:90:f3:c5:57:e2:26:c1:
7e:d1:70:63:3d:2e:ff:6a:50:cc:82:42:a1:92:2b:
ca:b9:85:7b:dd:5b:96:6f:6d:92:7d:02:cd:54:d3:
17:0f:c1:57:fa:79:4d:63:e7:72:5b:c5:13:d1:f8:
ff:60:db:27:2c:4b:6c:a5:c5:59:33:f9:f9:86:de:
c9:93:c8:10:d0:70:9a:ab:9c:50:ed:32:0b:97:78:
1d:c1:5b:d6:22:08:70:ad:75:d2:22:f7:69:c3:42:
a1:1b:9a:22:80:5e:10:9e:e0:89:88:2b:7c:74:26:
e9:61:9a:aa:79:e3:85:16:7e:50:b6:d8:d4:85:fa:
0f:95:8b:cf:72:42:2c:c5:0b:56:50:1c:5f:a3:21:
9e:ad:8f:50:51:56:2d:7d:4c:44:7f:6a:4c:00:28:
35:bd:aa:2b:29:d0:c0:40:dc:60:b7:1f:c0:07:f0:
49:98:a4:65:67:9a:e7:8b:26:ec:78:74:54:8c:0d:
3c:5d:c2:d6:21:cc:c0:20:55:04:09:ab:ac:86:c5:
45:cf:a9:e3:12:cb:f3:a9:87:fa:07:0e:9e:dd:90:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7D:4D:20:72:67:F1:B9:42:5E:2F:1D:21:75:19:D5:BC:35:25:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl
X509v3 Authority Key Identifier:
keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
sbgp-ipAddrBlock: critical
IPv4:
199.30.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:07:a6:56:ba:a3:56:88:a4:d4:4c:32:20:49:3e:d6:1e:c4:
24:67:7e:f3:0c:60:1d:3e:9c:8b:47:b6:c2:83:b8:fd:e7:21:
63:a5:02:52:75:cd:ae:ef:4d:3f:05:e7:38:ea:ad:29:b4:63:
19:89:db:65:61:94:cf:46:24:48:fd:1b:0a:82:30:89:a8:60:
e9:a8:9d:c6:03:6a:89:95:83:29:93:36:fe:97:eb:ae:c3:c0:
4d:7a:c0:c7:ea:e1:71:15:a1:f3:25:9a:91:f3:62:56:92:ee:
bb:2b:c6:62:88:c8:98:35:9c:f7:ba:3e:c2:ea:a0:bf:ad:d0:
e5:68:f4:d1:4d:60:e8:53:70:59:91:95:6e:6c:38:52:f4:a6:
05:e3:4c:c8:3a:a0:e8:ec:7e:26:90:d2:df:41:71:a0:96:f1:
a9:6b:6b:e3:35:b3:ac:2a:62:cb:b0:dc:3a:93:a3:94:f4:e9:
8b:01:33:d2:f8:05:3e:e0:3a:1b:25:5d:87:7d:bd:6f:7c:d2:
3f:2a:2f:31:04:d2:f0:d7:eb:1d:46:3a:40:1e:d3:2c:f0:73:
cf:6f:d0:ad:10:6a:ed:f3:ff:00:ff:4f:7f:d8:60:2e:9f:75:
b0:5c:be:7c:97:4a:98:1e:de:ea:78:ab:cc:2e:52:68:47:a9:
8f:7a:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:35 2025 by rpki-client on console.sobornost.net