Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cb0ad46-1766-351d-a478-bbdc7cca5d8b.roa
File: 6cb0ad46-1766-351d-a478-bbdc7cca5d8b.roa (raw, json)
Hash identifier: p26YI1EHfYTxIELS7juA8Kn9zXb8RCC6br2tjpb0Cb8=
Subject key identifier: 3C:60:39:44:DC:50:DE:7A:5E:12:78:CA:FB:B4:71:BD:41:6E:F8:AE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA68377D53DB122B7001300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cb0ad46-1766-351d-a478-bbdc7cca5d8b.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 13367
IP address blocks: 73.88.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a6:83:77:d5:3d:b1:22:b7:00:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=5af42b27-1c0d-4728-8af9-b7ed3576b700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:ac:fa:c6:94:09:ee:9f:5b:8f:01:09:7a:
cb:0e:86:9c:72:4f:d6:0a:9c:04:b3:01:83:d8:fb:
7e:fa:af:ce:26:b8:72:54:83:59:f3:9a:85:ae:d3:
3b:7f:23:3f:aa:23:c4:57:0b:b3:32:92:32:92:a5:
60:91:79:6b:72:81:5c:ef:57:4a:2a:5c:bf:13:08:
a9:3b:f0:84:8a:e3:04:8c:4a:05:3a:14:42:93:71:
49:1c:3a:7f:63:0f:d3:f0:ea:64:35:7d:be:84:27:
53:82:4c:7f:c0:8b:4b:3a:5b:91:cc:4d:24:9e:1b:
18:31:df:53:cc:12:ad:9a:96:ea:64:9a:57:ef:36:
eb:78:4e:25:ee:bf:76:a5:29:c4:1a:41:50:bd:60:
75:bf:72:40:19:4b:25:34:91:ea:a5:3e:02:e3:af:
9e:fb:25:ae:1c:38:c2:70:3a:65:09:26:4b:e4:ac:
27:52:53:16:05:39:90:25:d4:24:66:4f:d2:a3:d4:
1b:a8:6c:49:d6:71:15:a4:e8:5c:50:ca:75:1f:64:
88:02:8a:54:09:fe:45:f7:64:3a:d4:b6:84:3d:89:
a6:95:6d:b2:47:fd:de:4d:55:73:ab:8e:a1:cb:ba:
85:7a:8c:2a:29:5b:a1:2e:ac:73:ba:d3:e3:28:ec:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:60:39:44:DC:50:DE:7A:5E:12:78:CA:FB:B4:71:BD:41:6E:F8:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cb0ad46-1766-351d-a478-bbdc7cca5d8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.88.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:0d:61:d5:ae:cd:8f:ad:d2:5d:b0:13:3d:f8:10:b6:7f:e3:
4b:ca:11:05:46:08:22:8a:e0:03:46:76:07:d5:d1:ba:b2:93:
80:28:4c:eb:0e:46:a3:2e:1e:19:31:e7:d9:90:61:53:5f:aa:
fa:bd:81:04:f0:a1:67:51:be:57:51:f4:30:59:3a:bf:aa:2a:
8e:67:82:26:58:b1:28:b5:42:f5:28:d8:15:2e:8b:14:55:e1:
fe:33:d2:b0:a3:82:fe:bf:73:05:f9:2d:c9:54:54:0b:71:94:
0e:88:45:3b:1b:25:ef:1a:ab:61:5e:d8:8e:92:de:a6:c8:1e:
98:ac:2d:50:ed:06:53:2f:89:5c:23:f5:f5:25:91:a9:ac:6e:
be:52:90:bd:93:50:2e:77:5f:9d:87:d1:36:88:f3:8d:c7:d9:
72:b9:1d:2c:99:ac:3f:6b:82:83:8b:8c:fd:2d:5d:f6:d7:e2:
77:4c:6e:e5:f2:6b:96:a4:c7:00:8e:d5:a3:b9:20:eb:22:f3:
1c:bc:20:9f:5d:de:76:22:06:68:39:b3:3d:83:cc:73:78:a8:
e8:7c:98:f4:0c:e3:72:5c:d4:68:3a:36:fa:59:74:c6:40:a8:
82:2d:17:17:e4:8b:f2:8b:f1:cc:ec:eb:d1:b4:22:59:7c:c5:
70:ba:37:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:49:32 2025 by rpki-client on console.sobornost.net