Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa
File: 3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa (raw, json)
Hash identifier: vpkGK+2R0YGk3B1KkVjwSMKTH5JhWksVHxHKiWVEob8=
Subject key identifier: 8D:A8:58:4B:92:5B:87:52:78:CE:50:16:9F:96:C5:E2:B5:3E:51:79
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858494E2EB46B8A4A80BA7F2370C0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 2559
IP address blocks: 66.185.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b4:6b:8a:4a:80:ba:7f:23:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=41f45d8a-d7f7-4a1f-937a-ed56067a9e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:0a:a5:d3:67:6a:a7:6b:61:8e:2d:55:3d:
66:7f:99:8b:39:56:65:04:ab:31:c9:fc:b3:91:84:
f4:96:2d:c6:31:97:2f:cf:f3:2c:fb:76:a1:d0:53:
9e:72:ca:a5:2b:2a:83:8a:d5:ed:b3:ff:5c:d8:05:
fd:07:65:0f:49:76:8d:a4:c8:86:e6:f9:f9:35:5c:
b8:3f:a2:05:bd:39:74:b7:19:47:1c:be:3b:fe:ea:
3c:df:de:f6:59:a1:08:20:08:18:71:a9:a6:52:c7:
c3:a3:f9:e2:4a:c5:41:14:ad:e8:c9:64:d4:14:94:
96:73:4c:80:7d:00:34:de:20:33:ea:86:70:a2:91:
04:90:76:6e:9b:d2:4e:2a:c3:b6:66:fa:48:aa:64:
d4:38:d4:c1:b1:dc:b6:16:e8:0b:0c:90:c5:11:a6:
f9:d9:36:05:13:2e:93:15:73:40:b4:7f:ca:1e:8f:
ff:b0:36:a3:1f:a7:9d:38:e5:30:5c:71:22:14:fd:
5b:3f:31:41:47:f1:7b:9b:44:d0:97:9a:c5:64:70:
3b:8c:97:68:da:06:5b:0d:36:77:a1:b3:af:9f:30:
d1:40:9c:27:09:f5:fa:ab:68:6a:c0:9f:4b:6d:fd:
b1:5b:15:85:42:30:61:ec:5b:02:dc:ed:d5:e7:77:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A8:58:4B:92:5B:87:52:78:CE:50:16:9F:96:C5:E2:B5:3E:51:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3e85b5bc-9b0d-32ee-a2c0-353cb7015be1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
66.185.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:fb:94:22:1c:89:5b:d2:3e:ba:a4:d6:4f:25:f1:b5:c2:1b:
e4:c4:8c:d4:35:80:2e:d9:9b:ad:7e:5e:ac:32:0c:4a:97:a9:
75:d7:92:f8:45:30:5a:58:8d:0d:0d:53:74:dc:d8:96:fd:3e:
24:2b:5e:41:7b:84:96:17:da:da:37:aa:10:e7:5f:23:30:97:
19:d3:68:ba:86:6f:0e:15:ce:bd:15:c4:9f:9f:db:c2:02:e2:
bc:24:40:8c:f0:3c:25:cd:f1:7a:b7:10:be:f8:a2:ad:86:ce:
a1:f5:49:05:ef:ca:bc:fe:91:07:79:31:6c:42:88:40:da:0c:
c9:69:3c:e1:dd:ea:bc:57:36:cf:c2:f6:77:30:3d:52:de:00:
e8:bd:f0:ba:6e:c9:49:1f:a2:76:75:84:61:94:d9:69:61:d2:
1d:ba:78:8f:e1:c8:93:29:64:eb:31:63:d9:7b:77:7d:77:c4:
e9:fc:83:6a:13:0c:7a:bf:64:6b:51:7e:7b:96:8e:4b:cf:54:
6c:01:8c:19:ee:c3:af:71:cc:bb:b2:34:f0:95:0b:16:8e:fc:
69:e6:ef:d5:ac:c0:06:df:d1:b1:e4:b6:1e:57:1b:47:10:36:
e6:67:0d:95:ca:02:3d:46:91:e5:70:c2:0a:fc:a9:a5:b7:23:
60:d3:ea:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net