Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa
File: 2c227bfd-f08b-398c-9969-3fff99fa4025.roa (raw, json)
Hash identifier: 7dwJszFcu+vpWoeQW0Lmp/ICVU6m3MHcMPoTeTDxMw0=
Subject key identifier: 20:D5:42:52:6B:30:18:E8:C2:9D:51:D8:99:E5:BF:E0:E5:22:AE:D7
Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial: 010D0C9F43285848FD56B571039A91FDE08A3180
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 397444
IP address blocks: 208.68.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:b5:71:03:9a:91:fd:e0:8a:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=bfb8c350-ab71-4baa-bd5f-a0e762523cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:29:0c:a1:cf:44:52:0e:d3:97:10:62:91:
86:57:f7:ef:81:d7:ed:92:e1:73:15:23:1d:69:5f:
72:22:19:4b:89:45:a4:11:f0:8b:94:92:ba:3d:f8:
c0:5b:5d:c7:0b:cd:bd:25:f0:38:ad:6a:ec:c5:91:
64:7b:27:af:6c:d8:5b:59:2a:32:f0:60:b8:2e:8c:
65:b3:f3:8e:0b:46:4e:9f:ce:39:74:0b:36:65:33:
55:ee:dc:14:c3:a3:e2:b3:64:db:4a:18:12:be:e9:
b0:01:bd:67:ae:17:1a:47:de:23:b8:63:68:bf:ef:
42:de:39:f2:6d:d5:03:5f:8a:28:81:1f:74:e9:48:
cd:7a:e7:bb:01:ea:26:c7:0c:18:14:05:62:aa:73:
e2:a9:b8:e1:4e:95:3d:78:52:2d:ec:97:30:fd:57:
93:97:a8:25:6d:30:ed:ac:6c:20:08:a3:1a:6e:a7:
14:87:8b:88:4f:be:cb:fb:b8:29:4d:c4:29:88:54:
9c:b4:ca:0e:76:65:a2:cf:cc:b0:29:b6:31:5b:a9:
13:59:46:02:08:7f:ed:2d:98:f2:b8:49:1a:64:28:
07:41:fc:7d:dc:5f:16:00:f1:05:8f:c6:6a:61:59:
2c:1b:13:5c:9e:32:63:ba:66:58:c1:89:30:9d:1f:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D5:42:52:6B:30:18:E8:C2:9D:51:D8:99:E5:BF:E0:E5:22:AE:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl
X509v3 Authority Key Identifier:
keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:6a:ba:41:e4:e5:cc:0e:63:f7:3e:98:f4:10:05:bc:eb:12:
cc:84:f5:e8:0f:63:1c:34:d3:0c:dd:73:01:db:e6:64:88:2d:
68:62:46:00:05:b3:f5:7f:be:95:e2:2a:72:58:c3:9c:d0:eb:
61:ae:48:04:5d:5e:b3:6b:a7:9e:6d:2d:89:d9:d2:5d:49:c0:
1b:c4:3c:ef:d6:ab:8a:19:3d:1d:a2:7d:f4:27:2c:1a:38:b8:
2d:25:3d:f8:41:0a:30:11:39:60:f6:58:24:58:30:d2:ad:79:
49:a8:94:74:9e:e4:33:21:d2:a7:a4:cb:68:33:00:28:34:0b:
4b:db:be:07:fc:f8:47:95:bc:e4:de:c0:ed:71:e4:c6:8c:b6:
bf:01:2e:8f:d2:e3:b2:a4:f1:26:47:99:02:3e:2e:35:f9:b4:
19:07:37:cf:d0:d1:9c:23:17:b2:8b:97:12:78:fa:26:bf:d0:
a1:1c:a1:a7:7e:0f:c6:11:ee:d3:7d:08:1c:95:d7:d3:c4:2a:
fe:b6:84:a6:c3:ec:92:00:ab:83:08:9b:02:60:96:c3:37:a4:
0b:d6:f3:c7:3f:b1:d8:00:10:8a:ef:62:f9:ae:b5:47:62:1d:
44:b1:18:0c:76:be:53:2e:da:bc:a4:b5:97:03:cf:16:cb:1d:
5a:c8:fc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:20 2025 by rpki-client on console.sobornost.net