Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/6a7168dc-bbc2-35d6-be1b-4425c171e598.roa
File: 6a7168dc-bbc2-35d6-be1b-4425c171e598.roa (raw, json)
Hash identifier: Oub9cJmaBEMHbI2r4Q10tx5nuPnFBd0gTDFNcwGn4GE=
Subject key identifier: 3F:B7:26:E1:84:5B:D6:83:CB:37:5F:7E:A4:17:D8:AB:4F:4D:6C:CF
Certificate issuer: /CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Certificate serial: 010D0C9F4328584981D4566FA2DD77818C7BA2A0
Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/6a7168dc-bbc2-35d6-be1b-4425c171e598.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 13347
IP address blocks: 209.166.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:56:6f:a2:dd:77:81:8c:7b:a2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=0894ff22-ed3a-430f-b232-20a6993b07f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:c0:fa:a5:bc:04:3b:de:ce:86:10:97:f7:
6d:37:03:d5:11:b8:22:ab:15:4b:9a:66:0b:d7:fa:
66:16:4f:c5:66:1a:7d:2b:96:07:da:1a:29:a4:34:
1d:76:f3:49:4c:dd:68:c5:3f:13:bc:bd:6b:fd:68:
61:1c:d0:48:4d:12:0d:cb:46:99:3f:38:cd:14:71:
67:f8:16:d1:f0:ad:df:79:68:f3:3a:8a:75:0a:0f:
19:74:7c:09:17:fd:6f:62:a1:4d:e2:0c:61:e7:51:
19:b0:2a:9b:c3:21:73:8f:f9:a4:83:c0:80:81:15:
9f:82:c4:a4:16:f9:61:52:3b:8f:76:d8:e6:2f:0b:
b0:2a:b1:bd:27:0e:54:03:97:bf:d9:3f:77:65:39:
33:4d:fa:8e:37:55:b1:38:23:8c:6a:ef:ee:09:8b:
5d:34:84:64:da:6f:95:38:3f:04:77:4e:05:66:a2:
13:06:7f:9d:e1:78:d2:67:76:48:0e:76:95:8a:3d:
19:12:dd:56:49:55:dc:b0:2c:78:b3:bf:1a:ef:0f:
cc:fb:58:8a:75:c6:fb:f5:6a:7d:99:34:ae:c6:66:
7f:95:c4:9d:93:34:bf:f8:51:6c:39:1d:40:59:dc:
26:25:c2:3d:a8:08:c5:ec:7c:e9:8c:ac:fa:92:e6:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B7:26:E1:84:5B:D6:83:CB:37:5F:7E:A4:17:D8:AB:4F:4D:6C:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/6a7168dc-bbc2-35d6-be1b-4425c171e598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl
X509v3 Authority Key Identifier:
keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
sbgp-ipAddrBlock: critical
IPv4:
209.166.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:f8:f5:90:52:f8:7b:37:8d:5b:7a:77:28:3c:d3:c1:76:5b:
4d:eb:b5:b0:40:de:1f:cb:35:23:cd:f3:ae:90:b7:8a:0e:42:
cb:82:a3:81:f1:09:a3:30:58:5a:32:ff:20:d4:eb:96:b8:40:
f8:44:06:bc:4a:eb:ad:0b:a7:d5:4e:46:f1:7d:5c:1d:33:25:
d9:d1:66:e6:9f:0d:5e:ac:da:de:ee:a0:c5:42:eb:6f:42:20:
a6:3f:5d:4d:1a:0b:6a:ad:4c:da:86:ce:fd:2a:5d:68:01:54:
97:9f:ea:73:ef:12:c3:6b:5a:9b:8a:07:e8:0f:41:e7:16:b5:
84:47:7c:49:19:95:15:68:22:16:7f:81:11:66:70:b3:44:bd:
0f:8b:b8:00:ac:1e:36:60:12:33:ae:01:de:6f:a4:34:91:4b:
35:9c:2c:1a:ed:f1:80:00:be:ff:3b:05:6c:0e:8e:7d:94:ad:
da:d1:51:c6:a3:d3:9b:04:2f:c9:8f:e9:29:fa:56:c7:30:d1:
61:8e:de:1b:07:1f:44:f1:c4:53:d4:bb:38:95:0d:30:2c:d2:
2e:9b:6c:16:bb:c3:2c:78:6b:33:83:2c:1c:74:e0:74:71:b7:
9c:95:86:60:0e:e5:9f:84:b5:ab:86:bf:e1:7e:31:02:c7:49:
08:79:4f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:31 2025 by rpki-client on console.sobornost.net