Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa
File: 89772c28-8eb2-3845-a823-2fc46db1e47d.roa (raw, json)
Hash identifier: mL+/DhtTZW/86VTTlN+srbQlCmLF7sVSycmb6orCJ+I=
Subject key identifier: DA:F7:BA:A0:8A:BB:19:92:3D:16:99:32:F0:CF:DD:5D:6E:3D:76:09
Certificate issuer: /CN=9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0
Certificate serial: 010D0C9F4328584961C725907E25A5FF3C367280
Authority key identifier: ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa
Signing time: Tue 01 Apr 2025 13:28:29 +0000
ROA not before: Tue 01 Apr 2025 13:28:29 +0000
ROA not after: Mon 30 Jun 2025 13:28:29 +0000
asID: 5056
IP address blocks: 136.242.64.0/20 maxlen: 24
208.90.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:c7:25:90:7e:25:a5:ff:3c:36:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0
Validity
Not Before: Apr 1 13:28:29 2025 GMT
Not After : Jun 30 13:28:29 2025 GMT
Subject: CN=f6d3ee76-c0b6-4c72-b472-a70b8a7c3438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:73:ec:2e:07:05:6e:ba:a6:7c:14:8f:07:fd:
5a:fd:30:31:64:81:3c:7f:83:c6:11:67:99:40:f0:
bd:a6:82:47:b7:ef:5f:c3:b4:78:66:e3:e1:d5:9e:
6b:63:dd:51:ba:c5:9b:13:22:72:e6:32:ba:1a:79:
71:86:31:25:df:3a:d7:c9:53:ed:3a:58:49:46:a7:
c3:04:fa:a0:05:35:64:bd:12:67:63:81:6a:d9:73:
15:cf:0c:0a:91:44:00:12:14:2a:c2:8d:6f:3d:9a:
08:61:fd:28:e0:d2:ec:65:5e:87:5e:fc:63:ce:99:
36:86:98:74:cd:78:36:40:75:2b:a3:69:ed:08:b5:
1c:7b:99:85:66:ac:3d:df:a8:da:df:c9:ab:16:fc:
17:e4:94:29:2e:ea:1a:19:fe:66:22:db:af:4b:72:
2f:38:3c:ad:c9:c7:1e:13:0b:c1:6e:52:d0:cd:86:
74:26:70:39:55:b6:de:c2:88:1e:10:c5:ca:84:d0:
9c:9c:63:09:4a:96:e8:0b:81:5f:99:6f:bd:0f:93:
b6:5b:b6:8c:c7:c1:43:ce:fb:6a:c5:32:15:52:bb:
05:35:bb:e9:7d:d7:c2:12:1f:0f:41:0b:57:87:e8:
00:40:c9:62:5c:45:e2:0d:bd:9d:fe:16:b4:0c:c3:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F7:BA:A0:8A:BB:19:92:3D:16:99:32:F0:CF:DD:5D:6E:3D:76:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/89772c28-8eb2-3845-a823-2fc46db1e47d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.crl
X509v3 Authority Key Identifier:
keyid:ED:FB:E1:A5:2A:1B:91:EF:C8:F6:A5:CE:0D:CC:62:BC:25:5D:14:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9940a5e7-dfbb-4bc0-afd9-60bf0c079eb0.cer
sbgp-ipAddrBlock: critical
IPv4:
136.242.64.0/20
208.90.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:fd:db:4c:cd:a9:74:49:5a:c5:a8:4e:84:01:a9:2c:99:5b:
0c:eb:64:e2:33:c4:4c:18:e2:5d:11:30:93:46:46:76:65:78:
ca:24:d6:9e:7c:54:33:89:5a:3f:87:e1:02:cd:1a:69:9e:58:
ec:dd:9f:57:99:e7:d9:4f:3b:b8:66:2b:63:57:09:90:30:79:
1d:95:a7:bc:52:f2:0a:b8:35:06:35:7a:be:32:e9:c6:f5:93:
ca:e1:7e:6e:85:a6:5c:b9:d1:a9:39:5e:c0:6e:f6:d6:c7:21:
d7:ae:76:c7:38:df:06:e8:4f:11:c2:c1:ba:7c:9a:1e:4b:cf:
e0:a3:d5:21:61:32:b8:6b:24:38:60:97:64:4d:d6:4e:49:1e:
3b:ad:da:d3:56:b7:52:0d:3d:62:55:e3:b9:9e:21:44:dc:57:
0f:d7:1e:39:f1:aa:d7:3b:5e:f4:97:d0:e8:a9:1e:21:c6:22:
dd:25:b8:0e:c2:2f:72:b7:0e:a8:92:0b:2f:92:dd:2e:76:89:
87:e1:9c:b6:a4:e0:02:31:a9:7a:26:15:67:0d:fe:ab:01:d5:
72:9e:a2:0d:d9:ed:64:bd:6c:8b:bc:34:47:9a:15:67:1a:ef:
7d:54:d3:61:12:41:77:47:a8:9d:e2:e5:98:f3:e5:13:0e:97:
5f:bb:59:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net