Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/bde6caf6-34f5-3393-bdeb-2462afa7133e.roa
File: bde6caf6-34f5-3393-bdeb-2462afa7133e.roa (raw, json)
Hash identifier: waVbn0MPw4MpttBqI0Z61nc4VPd/aEwDQyqmVVgstec=
Subject key identifier: 69:3E:6F:70:48:5A:DE:B5:E0:9E:7B:8D:91:63:AD:59:DC:33:B5:DA
Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Certificate serial: 010D0C9F432858496B7ECBE4BD05CE253BE53300
Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/bde6caf6-34f5-3393-bdeb-2462afa7133e.roa
Signing time: Sat 05 Apr 2025 01:00:47 +0000
ROA not before: Sat 05 Apr 2025 01:00:47 +0000
ROA not after: Fri 04 Jul 2025 01:00:47 +0000
asID: 21743
IP address blocks: 173.0.104.0/23 maxlen: 24
199.189.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6b:7e:cb:e4:bd:05:ce:25:3b:e5:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Validity
Not Before: Apr 5 01:00:47 2025 GMT
Not After : Jul 4 01:00:47 2025 GMT
Subject: CN=55ecffb6-6383-48b8-b79c-6ce4720141cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:72:70:9e:9a:bf:2a:92:04:bf:f9:f0:8e:
45:5a:19:3b:7e:ff:8d:ba:fd:03:02:84:86:ab:43:
a5:e9:63:90:eb:3e:e6:e5:70:57:5b:0c:94:a2:6d:
1b:27:45:4c:f6:e6:0f:86:4c:07:fa:5a:35:be:1d:
07:ac:11:98:3f:df:b5:cc:a8:44:35:8f:0d:ca:5b:
89:09:20:eb:4e:9f:6e:e1:b3:6d:06:c7:27:c4:11:
2f:5b:4d:1f:9e:5f:99:99:af:4b:75:f8:5a:2d:fa:
97:ee:2c:76:d3:0b:f6:43:e3:d0:4f:1b:f5:4d:84:
50:f6:06:4c:98:1b:dc:e4:15:99:19:f9:14:4a:bd:
ec:60:61:85:0a:d9:c2:34:38:41:07:dd:71:1d:b0:
f7:b6:43:89:eb:9c:f1:44:02:61:50:e7:52:62:cb:
18:36:87:af:07:68:ac:00:e7:37:ef:20:65:20:42:
c8:64:6d:79:81:61:7c:02:e5:ea:9a:46:56:f6:4c:
fa:6a:b9:13:19:f2:23:1c:a2:b6:c1:99:3e:d6:c1:
3f:bc:0d:72:9a:dd:bc:af:86:75:02:7f:89:6b:59:
26:a9:9a:b1:96:c7:1c:f5:76:01:65:0c:ad:8b:70:
74:17:81:3e:d3:75:01:73:d0:40:16:6c:1e:0c:5a:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3E:6F:70:48:5A:DE:B5:E0:9E:7B:8D:91:63:AD:59:DC:33:B5:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/bde6caf6-34f5-3393-bdeb-2462afa7133e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl
X509v3 Authority Key Identifier:
keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.0.104.0/23
199.189.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:90:2e:c1:12:9f:c6:cf:6f:84:f0:37:26:0c:22:63:5d:6b:
f5:f8:03:a3:dd:2f:cc:88:df:9e:ec:47:12:e4:38:5c:15:aa:
e1:fc:4a:3b:78:7f:ac:6c:2c:dd:dd:62:5a:f1:50:c2:2e:7a:
ad:d3:4b:23:02:11:8f:05:3a:35:41:0d:e0:64:89:c5:04:a5:
66:be:2a:4a:43:f6:84:5d:10:00:cb:bc:ec:6a:7a:4f:8d:64:
88:58:e8:7f:74:7c:22:1b:d5:1e:9e:1e:30:8a:a5:9a:5f:88:
da:7e:0d:87:e0:d0:d2:5d:87:f0:3e:05:41:d2:73:03:8a:bd:
62:6f:86:cf:f2:38:ef:09:2e:58:aa:fa:1d:ab:82:71:88:a0:
fc:9d:ed:8a:d5:d4:33:b5:19:20:8e:7b:2b:3e:a3:4b:7a:5a:
96:3b:41:70:1c:5d:b7:d5:a9:f9:cb:95:02:0e:a7:b9:be:ca:
91:27:74:c3:21:b3:6a:76:57:a9:f3:8e:37:be:e9:df:46:c7:
db:e0:a3:a5:0b:5e:83:c5:04:cf:43:52:07:29:3c:6d:e2:25:
0a:e3:0b:17:94:af:40:33:e4:af:c0:d1:be:72:e9:2f:af:9a:
fa:0d:aa:20:ea:a3:c3:ff:96:2f:83:c8:d2:51:b1:a5:ee:43:
31:ee:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net