Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa
File: 2facff71-9840-3679-b83b-43e50bddf021.roa (raw, json)
Hash identifier: NMfHmbYwzX0hbYWi5LNtDChisV3hpor8edKJBUJ+zlI=
Subject key identifier: 74:97:4C:69:D4:7F:24:7E:14:9B:C1:7F:D6:0E:58:E3:C2:DA:82:B9
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584975446152EE7A4FA4C8F5D700
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 16417
IP address blocks: 68.232.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:61:52:ee:7a:4f:a4:c8:f5:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=e901a19d-7c8d-4137-9a8d-6f7f3c166f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:cd:f7:d3:b6:84:3a:58:9e:62:ec:ee:fd:
3d:14:38:b0:63:6b:cc:ad:f8:bf:b4:23:ab:f0:58:
1d:de:28:30:db:b4:1f:bb:d5:00:41:83:28:b8:54:
eb:4e:6d:36:4b:87:f4:19:02:64:9e:9e:a3:96:a4:
b3:5e:68:ec:a6:55:16:bc:0b:31:70:d2:c7:38:34:
77:c2:19:86:8d:12:1c:82:ec:ba:cf:17:a3:4b:de:
e9:36:2c:f7:5e:6c:91:5e:03:22:e7:d9:c0:3d:77:
95:df:9a:9f:d5:45:c6:52:7a:02:4f:3d:fd:0b:14:
a7:2d:e6:ed:63:a5:f6:1b:9d:a8:78:9d:93:17:db:
5e:e5:bd:b8:ae:ee:ef:dd:1f:db:db:8b:4b:af:94:
e9:c7:6a:d3:95:5f:d5:16:12:8d:76:de:a4:a2:b5:
a0:aa:85:9a:61:48:a7:7f:79:f7:b4:36:bb:56:68:
3c:ed:06:e9:a9:d3:70:65:14:84:a0:e8:de:ba:45:
f4:01:84:10:9c:0b:98:eb:90:06:15:91:fc:55:a9:
d6:22:54:36:9c:c1:94:72:0e:16:6e:e6:59:9d:81:
9b:eb:46:15:31:2a:a1:b8:72:39:a8:17:47:75:2b:
44:9b:b6:1c:9d:d3:ed:52:09:15:83:27:f4:58:32:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:4C:69:D4:7F:24:7E:14:9B:C1:7F:D6:0E:58:E3:C2:DA:82:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
68.232.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:da:bc:23:61:b3:79:38:98:a5:38:06:9b:9a:b7:d2:e6:8f:
28:9e:96:90:d5:ef:e5:87:31:74:c4:60:44:59:1e:ab:b9:3e:
61:65:1a:72:12:20:8e:9b:c0:24:26:da:37:05:c0:d1:f3:19:
f5:cf:ff:5f:c3:45:40:9c:51:95:2e:98:84:40:48:ec:e0:5f:
7c:85:cf:54:12:e5:0d:57:60:1a:c8:84:bc:49:f8:50:11:5e:
2c:37:f1:25:bb:13:8a:c4:d5:56:df:3d:57:a4:30:ce:5d:90:
50:a6:bd:ec:4b:33:fb:72:c2:e9:15:92:79:a9:ca:2b:d2:f2:
22:66:8e:99:f9:a1:f5:0d:16:fd:0c:a6:18:4d:4b:95:5d:0e:
71:1e:0e:fa:40:f5:7d:23:4c:82:40:2d:e0:08:d2:a4:10:f0:
b3:38:c7:c3:b3:4b:15:e0:7d:11:52:f5:3f:58:3b:e5:e5:31:
7c:57:62:82:47:00:b2:f7:1e:c2:87:5a:6b:51:54:42:bd:e2:
1a:84:32:7d:c5:86:09:42:f2:12:d4:63:32:c2:56:c4:8f:b0:
56:94:78:b8:e5:40:db:e6:66:04:c5:c5:f0:08:4e:ed:84:19:
cc:63:c7:39:3b:04:91:be:06:ee:53:71:60:c8:d5:6a:8c:35:
36:b4:92:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:07 2025 by rpki-client on console.sobornost.net