Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa
File: 1469698d-5721-3dc4-a71b-77c9af5be168.roa (raw, json)
Hash identifier: +BX0VvEEB1xtm40Ar9bFHMx9qw0JGBPvmCM1fj0gxbQ=
Subject key identifier: E7:6E:D9:41:43:B4:D5:78:82:F0:D8:87:22:69:90:13:E8:E0:53:B5
Certificate issuer: /CN=24d5eca0-84f1-42a9-aba6-46b37f07aa4e
Certificate serial: 010D0C9F432858497CED8FEB30B197F07861FA00
Authority key identifier: 8E:2C:29:0C:FF:3F:AD:6A:E0:5B:7B:CA:A0:F9:95:16:CC:E9:9E:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa
Signing time: Fri 11 Apr 2025 06:52:43 +0000
ROA not before: Fri 11 Apr 2025 06:52:43 +0000
ROA not after: Thu 10 Jul 2025 06:52:43 +0000
asID: 49683
IP address blocks: 172.82.64.0/24 maxlen: 24
172.82.65.0/24 maxlen: 24
172.82.66.0/24 maxlen: 24
172.82.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:ed:8f:eb:30:b1:97:f0:78:61:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d5eca0-84f1-42a9-aba6-46b37f07aa4e
Validity
Not Before: Apr 11 06:52:43 2025 GMT
Not After : Jul 10 06:52:43 2025 GMT
Subject: CN=4429a25c-d153-43b7-919d-14679e9ed00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:18:0a:c0:59:86:76:9e:91:89:08:05:90:dd:
8b:dc:27:98:7f:44:5a:24:ae:00:90:1e:67:1d:72:
11:01:aa:4c:e7:0b:64:94:75:f6:36:47:6d:2b:4d:
3f:fc:96:14:a3:de:be:58:cc:ba:2c:f6:b9:ee:13:
83:ae:ae:13:eb:88:00:ce:9a:76:5f:f2:d8:c1:69:
05:54:62:31:8b:fe:f9:21:9c:ba:1b:d9:e5:6d:4c:
3f:47:28:21:18:0f:78:d4:07:c6:6b:f7:dd:7d:2a:
c3:80:33:9c:95:fe:e1:5d:6b:0f:aa:be:c5:58:12:
fd:b8:46:92:a6:ea:0c:b0:e0:46:00:86:45:77:5e:
27:6b:ae:9d:33:cd:c2:7a:a7:8b:10:d8:29:18:43:
3a:3e:e0:24:8d:50:c3:af:e6:a6:af:96:04:cc:d6:
9b:56:31:f5:65:27:1c:13:43:5d:b1:74:3f:86:a0:
e3:e2:70:27:54:46:58:76:83:3a:e2:04:63:45:8e:
7d:ec:10:c1:b0:68:51:28:36:9d:52:d8:1f:67:0b:
66:61:f8:01:d9:01:1a:df:79:87:4f:88:ae:bf:d0:
71:0e:9c:14:de:6b:32:c8:9f:a4:3d:dd:fc:45:3d:
68:59:ff:fb:61:ac:b8:8e:fb:30:7b:4a:92:7a:b3:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6E:D9:41:43:B4:D5:78:82:F0:D8:87:22:69:90:13:E8:E0:53:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.crl
X509v3 Authority Key Identifier:
keyid:8E:2C:29:0C:FF:3F:AD:6A:E0:5B:7B:CA:A0:F9:95:16:CC:E9:9E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer
sbgp-ipAddrBlock: critical
IPv4:
172.82.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:77:86:12:41:69:b0:89:30:38:4d:4f:83:2d:df:1e:7f:1b:
59:94:f2:2a:43:97:c6:87:f1:a0:25:54:79:e7:6e:f1:2e:d0:
8c:1e:94:37:46:f5:dd:67:b9:b9:82:38:28:9a:55:a1:dc:ac:
42:4e:0f:c5:5e:c7:1d:ce:ca:0f:47:a9:12:9b:5f:3b:56:66:
5d:2a:ad:da:69:e9:21:fe:f8:bc:43:10:a9:26:4e:c8:95:f5:
d9:95:8b:6b:0d:6e:42:d5:86:1b:1d:62:41:b9:33:90:26:5a:
95:c8:6e:7d:7a:a2:93:26:33:37:50:af:e7:f1:ad:f2:ee:a8:
3c:f6:95:4e:82:84:65:d9:d1:c7:eb:08:bf:bf:18:77:41:bb:
c1:d4:a3:b8:5e:0a:33:c0:32:33:eb:8b:7a:5d:ae:fa:9e:6f:
38:6a:b3:c0:0c:c2:d4:f7:eb:8c:1f:50:b0:6e:0e:2c:0d:4c:
32:60:91:19:bb:48:48:9c:91:5e:f4:ad:50:87:55:c4:3c:ad:
1d:f4:1e:c6:2a:9d:1d:6f:01:e2:04:bf:32:aa:f0:73:eb:88:
45:ba:91:0e:d8:71:0e:52:b5:18:8b:f0:43:29:e3:c4:72:d7:
b8:3a:9e:c5:73:11:cb:dc:37:18:dc:54:6c:73:a4:4c:0e:a9:
ff:76:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net