Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa
File: 7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa (raw, json)
Hash identifier: 9FWfIZXrX3mrxFZtzmcNzQEEWZca0T1KzXsnfDKxvUk=
Subject key identifier: D2:19:9B:4B:84:78:AD:BE:9B:56:DD:0A:7D:60:72:FC:95:2A:DB:FC
Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial: 010D0C9F4328584981D45A62A6508B6F04C182A0
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 5650
IP address blocks: 168.91.64.0/24 maxlen: 24
168.91.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:5a:62:a6:50:8b:6f:04:c1:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=45d2238a-43dc-480a-9c7f-9b181c45ea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:2b:3e:94:fd:5b:3e:2c:ac:7c:cf:1a:7e:
e3:68:b9:8a:3f:4a:7a:6c:72:08:13:b1:ec:27:e5:
51:a1:59:3f:5e:d2:09:22:9f:dd:df:ef:f5:f8:ad:
f7:88:f6:73:d1:77:97:da:c7:70:8f:01:76:b7:09:
18:67:36:8b:30:68:db:44:59:c8:25:db:db:49:35:
c4:16:d5:e2:6c:e3:95:c0:ce:b5:14:b0:77:77:c8:
f7:cb:e6:9d:4d:cf:e7:a5:11:ad:04:71:6e:ef:e0:
99:a4:72:5d:77:52:35:f8:98:76:a4:f6:60:a6:16:
30:1a:10:32:14:c0:15:94:f4:e7:b7:86:b5:06:0b:
66:da:01:1a:f7:f5:f7:85:b2:b4:34:38:60:ce:cf:
8b:45:bc:94:1c:e7:0a:db:b2:0d:5d:12:90:8d:de:
ee:4a:6e:e8:88:bc:a8:32:fb:11:52:76:d9:2e:c8:
b7:35:de:d8:c9:e7:35:bf:41:8c:3a:4a:dd:89:12:
cb:4e:2b:2d:4c:d8:ef:03:9e:41:00:b1:d0:d3:f3:
ab:5f:80:41:36:e4:0d:6a:e5:94:5a:5d:15:22:97:
b4:a2:72:20:44:7a:0c:fd:99:40:c5:78:a5:f2:7c:
53:e9:c7:d3:9a:c8:51:50:5a:1a:fa:af:56:38:ea:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:19:9B:4B:84:78:AD:BE:9B:56:DD:0A:7D:60:72:FC:95:2A:DB:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
X509v3 Authority Key Identifier:
keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:0d:fb:23:5a:04:77:a1:96:b3:02:b2:d7:ab:76:bf:07:53:
c1:50:97:53:99:cd:c8:9f:ae:2b:7b:94:0a:75:72:63:f2:1b:
fd:41:13:5f:32:6e:26:fe:e4:a5:e2:01:f2:34:c8:d3:7f:57:
57:f0:de:34:f1:fd:f9:73:db:55:67:fc:09:63:ef:b0:16:90:
4d:ff:b7:ca:9f:6f:f9:17:2e:83:23:39:58:4a:5a:9e:f1:cc:
d1:57:43:3a:db:29:a3:a0:94:90:ae:a0:3f:b4:e1:be:ed:7f:
bf:fc:6c:57:f7:0d:3f:4e:9c:db:56:88:bf:a9:7b:88:29:51:
69:7d:dd:db:36:57:5e:51:db:4c:ea:96:9e:9e:3e:67:ba:c0:
4b:02:e9:ee:4e:cb:9e:6a:21:97:3c:ad:1f:c9:41:31:58:5f:
30:14:42:0c:ca:0c:55:0a:dd:15:1c:b1:09:bb:98:c9:33:00:
d2:e3:9c:d8:52:f0:30:63:d5:43:b3:99:49:bc:9a:56:22:ec:
e5:c6:94:82:55:8b:5e:a6:a9:85:7d:2b:1f:a1:88:7b:06:b5:
0e:17:53:25:e5:e4:59:15:0f:dd:8b:4e:98:f3:88:36:a9:a2:
87:ac:a3:f4:34:3d:1b:16:a2:82:d0:ae:4f:69:3d:e9:ae:5f:
74:c2:6a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:00 2025 by rpki-client on console.sobornost.net