Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/fa95f29a-142c-36cf-a9b4-614c7af1346c.roa
File: fa95f29a-142c-36cf-a9b4-614c7af1346c.roa (raw, json)
Hash identifier: OXe2w6Mpjrl0W5bLmyMHs5oEtKeq1+RYiTAsb2ayV5A=
Subject key identifier: 9E:48:69:1B:F4:81:59:36:6B:D9:2F:2E:F5:6A:8F:12:AA:1A:5C:EF
Certificate issuer: /CN=66367942-14b9-49ce-b2d4-9472107e8402
Certificate serial: 010D0C9F432858492CAE76E771254A112D18BFD8
Authority key identifier: 75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/fa95f29a-142c-36cf-a9b4-614c7af1346c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 53831
IP address blocks: 142.202.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:76:e7:71:25:4a:11:2d:18:bf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66367942-14b9-49ce-b2d4-9472107e8402
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=35223b7f-5038-4f6b-a13d-1c13afc6714f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:9f:5d:51:43:91:ad:5e:d9:1e:36:8c:1e:
87:ef:7f:84:74:ad:1d:73:02:5f:75:b9:ac:c6:0c:
d7:b9:37:28:80:14:45:7c:48:63:7b:46:62:82:bc:
3c:79:e8:62:54:ec:90:98:a7:cd:66:b1:45:8d:23:
62:7a:b6:97:d7:63:c6:dc:55:12:ad:f5:5c:72:1f:
32:38:8b:3c:ec:de:cc:34:ce:81:b7:14:f5:ac:e8:
be:9c:9b:5b:0a:cb:ca:f0:86:7a:e0:58:ed:09:fc:
1f:12:c3:91:15:03:62:77:b3:b0:e9:5c:f7:28:60:
c6:a2:b9:e5:f9:29:be:bb:15:cb:47:31:71:a6:9e:
fe:97:08:6f:6e:d8:fb:be:82:72:9c:81:20:16:57:
1b:f3:e1:2e:61:80:af:9d:cc:10:ce:15:62:6a:0e:
11:71:be:04:ab:d7:c1:b6:99:21:74:37:1c:27:9f:
ce:59:eb:11:81:3e:b4:ef:4d:e2:ef:44:fb:5d:d1:
a5:94:17:fd:90:66:58:96:25:dd:cb:cf:4d:4e:0b:
c2:6e:63:9a:2c:7e:04:99:31:7c:d3:db:40:3b:42:
3c:88:db:3f:8a:1e:e1:43:f9:eb:19:a2:f4:a2:51:
a0:de:1a:f1:73:2a:f2:02:b7:7a:92:25:bc:39:6c:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:48:69:1B:F4:81:59:36:6B:D9:2F:2E:F5:6A:8F:12:AA:1A:5C:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/fa95f29a-142c-36cf-a9b4-614c7af1346c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl
X509v3 Authority Key Identifier:
keyid:75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:5f:1d:d1:52:07:f2:b6:ea:00:b7:9f:30:6b:0e:63:3b:55:
1d:7b:40:8d:1a:d7:38:fa:c9:e9:f1:8d:47:0c:38:ec:cf:15:
da:e3:65:69:b4:12:7e:cc:b5:28:0f:72:35:44:df:0b:60:43:
81:e0:56:1f:a6:c3:ba:c1:2f:f6:de:35:46:cc:cf:99:7a:cb:
a5:af:2f:9b:76:fd:1a:b2:be:f5:77:e4:3e:ae:3d:0d:6a:e8:
a6:75:27:37:bc:cc:2e:d7:ca:34:cf:59:38:0c:a0:1d:01:94:
ec:63:d4:59:90:f6:29:26:a4:bc:59:77:a1:c8:2b:9d:b2:8b:
ac:b8:d1:5e:b4:d4:cb:39:a1:83:a7:b9:7d:e1:e8:68:74:24:
c7:b3:ad:aa:d9:d0:1e:aa:e2:1e:ed:fd:92:e1:a4:e4:5e:60:
ef:18:e4:dd:ba:62:7e:29:27:eb:fc:20:c3:80:f6:55:1d:ad:
e8:1f:05:9f:0a:3d:3c:70:e2:85:12:77:e1:e2:84:f3:9a:d8:
bb:af:4e:c2:1a:42:d0:54:59:32:ba:68:a8:18:17:32:ab:9a:
38:73:38:b6:3c:56:01:ea:ed:ba:80:11:ab:41:0d:6d:5b:9c:
1c:65:e5:7e:7d:7e:2a:35:1f:72:1d:85:6b:74:3f:02:88:70:
de:76:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:15 2025 by rpki-client on console.sobornost.net