Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa
File: 6c7680dd-8697-3c50-8181-945c51777f91.roa (raw, json)
Hash identifier: 6Zxp7b/vzPeGuRyAWUQ2dXIqgkJqS18IjfG7R6vQs84=
Subject key identifier: 3D:3B:45:EB:E5:EE:3F:E0:BB:E4:AF:A8:EB:2A:22:14:D1:25:3B:95
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858497C3EF20F52122C3CC5C6C280
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa
Signing time: Fri 11 Apr 2025 01:00:48 +0000
ROA not before: Fri 11 Apr 2025 01:00:48 +0000
ROA not after: Thu 10 Jul 2025 01:00:48 +0000
asID: 8069
IP address blocks: 20.153.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:3e:f2:0f:52:12:2c:3c:c5:c6:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 11 01:00:48 2025 GMT
Not After : Jul 10 01:00:48 2025 GMT
Subject: CN=8b87ba29-e80e-4452-b598-18d1019e2513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:a9:dc:35:bd:8e:ce:26:f5:ee:b2:29:0d:
79:92:aa:a0:a6:bb:99:26:99:c4:59:83:44:49:35:
fb:1a:2d:6c:ff:f5:91:94:76:d4:6e:52:de:f5:81:
5a:c3:68:db:11:f3:b2:02:70:65:35:1c:8c:ec:9c:
00:08:30:33:ff:3a:c0:92:4d:05:c9:05:af:6b:49:
b5:1a:11:40:10:60:fb:7b:fc:f9:5b:4d:97:e4:64:
c0:6a:3d:5c:16:ad:74:04:80:c5:13:dc:a4:d4:d6:
90:c5:93:ea:bb:f2:db:51:1d:89:fc:7f:9f:20:64:
b9:20:37:93:71:47:b6:d3:ef:22:0b:64:26:d9:bd:
19:1b:bc:ea:ac:c2:c8:bd:2b:f8:a0:5f:3d:72:37:
6c:78:0d:93:29:85:f4:82:d6:f4:49:5f:26:cc:09:
76:e4:0d:54:05:89:5a:d0:b2:58:44:28:80:2c:37:
90:6d:68:a5:9f:e1:c7:3b:ef:9a:5a:84:6b:ae:e3:
2c:ec:66:72:64:b7:12:95:42:c6:d6:e8:97:c1:24:
6c:2b:23:7e:8d:78:46:c5:af:f8:a8:6f:6e:dc:7c:
aa:ad:cd:c4:14:e2:00:5c:6d:23:fb:d3:dd:ad:29:
18:f8:dd:01:1a:47:1e:44:15:77:54:ac:5f:45:a9:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3B:45:EB:E5:EE:3F:E0:BB:E4:AF:A8:EB:2A:22:14:D1:25:3B:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:98:dd:ac:f0:a6:61:d7:63:36:ce:67:4d:25:f2:3a:5c:d2:
0e:5c:7c:a1:37:e3:de:34:ec:ce:9f:de:5b:3f:ab:4a:7f:2e:
12:9a:87:a0:46:33:c4:0b:c3:0e:d4:0c:68:37:84:c2:33:3e:
02:09:26:74:99:ff:04:9b:19:19:51:90:34:4d:d8:c5:46:8d:
15:37:11:49:54:d9:16:35:90:79:d2:66:f5:ec:e7:86:39:d5:
b3:0a:c4:1c:46:c5:89:be:c6:52:93:fc:5a:0f:db:9a:b6:2f:
e0:91:ee:67:10:08:54:a9:b1:36:06:8d:8e:30:ce:ef:01:b4:
77:db:51:2a:66:98:37:2e:76:90:1b:df:23:41:2f:ff:fe:92:
e5:3c:39:11:57:9d:df:2a:27:3e:ee:01:7e:bd:a2:9e:cc:1d:
d4:44:94:53:bc:f3:bc:4e:d2:5b:ce:83:40:67:bf:74:7c:66:
4d:cb:ba:54:b8:f1:d7:3a:5e:00:39:16:38:ad:91:6b:ad:fb:
03:29:4e:1c:62:02:bc:77:2e:4f:23:1b:56:1d:96:a5:d4:44:
4c:a2:71:bb:9e:9a:aa:c1:d9:1b:ce:78:77:ff:68:d5:8f:28:
57:fc:be:3b:ee:b8:8c:03:7d:a0:ec:2c:b5:cd:9f:c7:9e:a2:
ed:9d:ea:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:17 2025 by rpki-client on console.sobornost.net