Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa
File: 0d00392d-06ad-38f3-b449-d981399ddfac.roa (raw, json)
Hash identifier: buSgBrjqYLkoWb0Z3vsLBUi0Wudmg6M922+7zFYWA/k=
Subject key identifier: 37:5C:2B:C2:00:16:20:5F:81:EB:CD:92:98:9A:9B:31:73:7D:6A:CB
Certificate issuer: /CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
Certificate serial: 010D0C9F43285849350EB1B651EC056A6773FC80
Authority key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 557
IP address blocks: 64.45.64.0/18 maxlen: 24
65.18.0.0/18 maxlen: 24
65.18.64.0/19 maxlen: 24
65.18.96.0/20 maxlen: 24
141.114.0.0/16 maxlen: 24
204.197.0.0/17 maxlen: 24
207.166.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:b1:b6:51:ec:05:6a:67:73:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=aa133cd2-bd2b-4862-a85f-44f2e169b9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:6d:1d:6d:0a:63:44:96:d3:d6:50:37:37:
49:e9:74:58:c4:a9:d5:0a:ca:c6:bc:85:2e:17:40:
35:a3:f5:cb:98:c4:0c:84:dd:de:50:94:96:d2:9c:
a9:99:58:78:dd:c9:e5:de:f7:08:d5:ee:be:61:5a:
62:28:80:9c:f8:70:b9:f2:e3:03:c7:c6:36:fd:91:
9f:3f:ff:50:f4:a4:c4:b1:57:22:fd:fb:cd:b7:55:
68:22:fd:c8:88:38:83:1f:02:af:30:53:fe:8e:f0:
30:d2:e1:1d:06:ec:a1:09:b3:f8:80:80:b9:21:f2:
6b:72:c3:d7:82:bb:0b:a3:e1:ff:aa:f2:22:f4:22:
70:32:19:29:21:a5:c6:7d:68:16:f4:58:a8:c0:12:
d2:b5:ce:10:f9:4b:f6:4d:26:10:c7:4f:c6:47:57:
42:0c:92:b8:01:87:19:11:e6:d2:db:3b:d7:a7:3c:
98:ca:e9:2b:0a:fe:a1:20:b2:15:53:30:ef:2b:46:
fd:5d:fa:83:59:eb:7a:f5:46:78:3e:88:3d:f0:a1:
62:94:37:47:1d:7e:f3:3e:f8:35:90:5c:db:60:ba:
58:9e:ae:16:f8:ac:1f:48:05:74:45:cd:93:62:e6:
38:be:b0:06:92:d1:7b:8b:ad:f3:06:21:6f:0b:a6:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:2B:C2:00:16:20:5F:81:EB:CD:92:98:9A:9B:31:73:7D:6A:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/0d00392d-06ad-38f3-b449-d981399ddfac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl
X509v3 Authority Key Identifier:
keyid:B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.45.64.0/18
65.18.0.0-65.18.111.255
141.114.0.0/16
204.197.0.0/17
207.166.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:cd:f3:6f:e1:b4:4a:32:d1:38:02:c0:f4:fd:46:ae:04:04:
4a:86:f8:0a:9d:f8:20:f8:cf:fb:4a:75:ed:ff:47:7a:8a:90:
b5:03:8c:c0:f9:d4:5a:f2:9c:60:7f:be:5f:f4:bf:a9:ac:7e:
b2:52:35:30:7c:ec:be:1d:2c:4c:08:eb:e2:11:69:c4:6c:64:
9c:28:98:19:51:80:e2:74:38:3f:0e:05:d4:36:62:4c:b1:d6:
91:cb:36:b5:88:d9:e3:53:63:17:2c:59:f4:f5:34:49:5f:1a:
8d:b8:2f:13:3b:37:cd:26:a9:2c:51:03:17:f8:2d:d5:37:b4:
ac:eb:c5:12:4c:97:44:df:79:c5:35:b4:51:d6:a8:e8:e1:e1:
fb:1a:2d:cd:ae:c2:50:28:7e:c6:f4:5d:bf:85:d1:44:25:a7:
c2:34:5e:12:76:f3:35:36:0a:77:69:3b:0e:80:8d:b0:78:b4:
07:6c:94:1e:24:e1:ba:f1:98:87:11:75:e3:94:15:e5:25:57:
ab:2a:75:90:37:84:ec:06:8d:4d:b9:34:56:e9:a1:ea:3c:5b:
34:64:56:44:09:ca:1f:fb:80:bd:c7:22:35:5f:73:17:c5:85:
59:3d:63:1d:5f:03:fb:3f:7a:47:62:12:40:8d:66:41:d1:3c:
45:06:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:20 2025 by rpki-client on console.sobornost.net