Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa
File: bff72a2e-13a9-31ab-bb47-124e89b56abc.roa (raw, json)
Hash identifier: lKvPvMStXJ7P7T6nQM/ZjoPfKmWzyFbndFXYoKkAOjI=
Subject key identifier: CC:BD:9C:AB:71:0D:B7:61:72:95:CD:26:F2:04:DC:39:07:63:A1:3C
Certificate issuer: /CN=8b860252-78e2-47ac-a6f1-f1dc5a900776
Certificate serial: 010D0C9F432858494CC93B465B6BC5F00B744CC0
Authority key identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 20099
IP address blocks: 192.44.70.0/24 maxlen: 24
2620:89:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:3b:46:5b:6b:c5:f0:0b:74:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b860252-78e2-47ac-a6f1-f1dc5a900776
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=79b2b27f-4868-4a90-b86a-935a6b236cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:86:83:3f:41:52:a4:86:70:3c:e5:f7:bd:fd:
3d:77:05:70:c0:35:0f:f0:c1:ee:c9:79:df:29:a4:
2d:c4:d4:5a:a1:be:ae:ff:6b:18:06:5c:98:0e:d0:
1d:9c:c2:29:ff:c2:13:39:87:ad:9c:1a:64:b8:8c:
8a:46:c4:df:69:2d:90:64:9e:f7:80:9b:3d:e6:7d:
54:83:fd:5f:09:e0:11:49:c1:87:e0:d3:38:71:8e:
90:3d:31:1c:1f:9f:37:dd:5d:de:17:3e:66:85:0b:
01:0f:3d:9c:6b:1d:1e:49:ce:7c:6d:f2:cb:ed:a9:
f8:42:4c:57:58:d0:53:54:12:19:b2:7d:11:38:1f:
ef:a0:91:21:44:65:3b:f4:55:36:5f:7a:02:34:4e:
96:13:d1:4c:ae:b0:65:68:c5:81:95:68:7d:a1:c1:
58:38:8c:af:c1:4a:4b:48:21:e3:ed:53:ec:79:1f:
df:ef:be:82:3b:1f:fc:38:2f:31:8c:3d:7a:e4:a5:
b0:90:a8:9e:30:b3:e2:37:2f:6b:ba:0d:f5:00:fc:
04:17:a8:1f:23:1c:91:95:36:5c:29:89:f5:08:93:
b6:a1:38:df:a5:c5:dd:01:ba:99:5d:5a:07:4d:94:
9f:02:62:eb:af:58:90:12:75:92:79:1b:4a:76:7b:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BD:9C:AB:71:0D:B7:61:72:95:CD:26:F2:04:DC:39:07:63:A1:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl
X509v3 Authority Key Identifier:
keyid:7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer
sbgp-ipAddrBlock: critical
IPv4:
192.44.70.0/24
IPv6:
2620:89:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:68:8e:97:7c:24:48:34:df:df:c4:c1:9d:94:df:7a:c1:c3:
0b:d9:a5:63:0a:e8:45:01:8c:cd:80:cd:78:15:0b:70:ae:28:
d5:bd:b2:d3:44:1a:84:3e:1f:4c:4d:17:32:40:b8:65:d6:d1:
a5:15:d1:5c:75:a1:81:f0:39:1b:22:7b:86:78:ae:4e:ad:01:
75:b0:41:db:e6:3d:41:71:f6:de:68:44:3e:48:ee:a2:a7:9f:
0a:f3:92:06:65:c8:7d:a2:e5:07:61:0f:b1:77:06:83:f9:43:
89:92:c7:de:7d:a0:09:99:96:7c:96:ea:e6:29:1a:e6:50:48:
e5:95:ee:07:3b:df:e5:de:53:b8:aa:46:a2:b3:23:ac:8e:92:
3c:82:6f:38:5b:24:6b:af:b6:c3:69:13:26:8d:5f:5c:29:a2:
3a:0e:07:79:c5:47:a0:b7:93:c5:bd:4f:5d:8a:f6:ef:a5:e0:
be:2d:db:b7:f5:20:7f:e6:fe:0f:28:a3:a0:b6:e6:85:b7:2b:
ea:7e:a5:eb:76:09:14:86:bd:85:e1:d1:1b:66:87:72:00:5e:
54:dc:fb:55:83:99:31:d9:11:87:b6:c1:fa:9e:47:48:51:7c:
a7:51:e4:c6:90:30:ff:1e:8e:c8:45:b4:eb:15:ed:33:20:c4:
93:21:20:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:07 2025 by rpki-client on console.sobornost.net