Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1924da-51f0-31cd-8feb-164b030dd38a.roa
File: ca1924da-51f0-31cd-8feb-164b030dd38a.roa (raw, json)
Hash identifier: 2sIX/CfpeLELvryOydeT/GCWNckRcz59UjTM8KMRzx4=
Subject key identifier: C2:32:B0:07:11:A7:DA:AF:EB:D6:2E:E1:D8:D1:65:D3:D6:70:5D:1B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA652C26631D6886B925E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1924da-51f0-31cd-8feb-164b030dd38a.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 33668
IP address blocks: 68.86.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a6:52:c2:66:31:d6:88:6b:92:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=c21c95d6-b429-4273-968b-edd84a3de9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:74:b3:5c:d7:f0:1c:45:f8:8f:1a:a3:c5:
31:de:a8:b2:29:12:f4:4f:d1:07:49:45:3a:82:a2:
fb:fa:62:52:bd:9c:dc:4f:60:00:05:77:d6:cb:69:
63:a2:a9:0e:d4:81:e7:9d:05:08:79:6c:1e:ab:50:
53:ec:c1:eb:05:d2:f9:f6:10:d3:0f:10:69:6a:05:
de:65:03:87:35:81:55:bc:1f:54:25:43:d2:28:f3:
b0:aa:cd:a3:e9:4b:25:a5:d1:d0:70:cf:37:26:a1:
bb:ca:6c:75:c7:a4:22:a6:53:11:dc:18:a7:50:da:
28:0e:95:5f:9b:c2:d8:cf:bc:a5:db:0d:a7:2e:2d:
9b:4b:13:64:76:b7:32:26:9f:5f:a3:18:61:62:48:
aa:fe:f2:48:b1:9c:a8:57:56:fb:37:70:e3:ed:71:
10:c5:1d:67:41:8e:00:2b:c4:61:22:d0:ee:47:35:
58:57:73:d3:c7:0c:eb:1a:84:d0:84:3c:5e:9f:8b:
18:ba:c2:4e:0a:cc:b7:2d:73:80:56:a0:5d:be:fb:
bf:12:44:56:09:d8:19:00:e6:89:92:63:4e:c6:db:
c0:57:0c:06:90:a8:76:1b:3f:08:fe:0b:d8:e1:e5:
af:dc:6b:3e:ef:a4:73:9c:4b:29:fc:72:66:76:ad:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:32:B0:07:11:A7:DA:AF:EB:D6:2E:E1:D8:D1:65:D3:D6:70:5D:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1924da-51f0-31cd-8feb-164b030dd38a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.86.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:d4:59:44:ea:b3:e2:ed:35:58:fd:30:28:4e:7a:0f:a2:a8:
2b:04:cf:aa:f9:7c:93:cb:cc:f0:a8:61:67:b3:58:b1:05:ad:
c3:48:ad:12:37:a8:cc:8c:92:b9:68:b2:23:6c:e7:2b:cd:4a:
91:98:db:5a:f9:8e:f8:79:3a:72:11:9d:89:28:81:48:16:9a:
fe:f4:7d:eb:9c:6d:7f:9e:77:f3:51:21:7a:8a:87:32:54:8f:
bc:33:f8:3c:2e:ff:d9:fc:a1:f1:f2:8c:70:ce:8c:35:25:94:
d8:f2:db:fd:6a:ee:5e:62:a7:ce:42:77:67:11:9b:1d:a2:f5:
d3:5e:2b:7a:2f:8a:36:49:dc:06:8f:a2:8c:44:1e:52:77:5f:
a4:73:9b:11:bd:50:70:d9:db:3b:8b:17:b4:fe:01:12:b0:bb:
50:79:4d:47:c0:f7:c2:c9:71:89:58:fb:cd:02:84:c8:bb:c2:
c4:1f:47:38:cb:f5:e0:05:d7:9f:9e:46:04:53:76:7a:e2:8d:
7c:9a:51:77:e8:3c:89:fc:e5:74:2d:e0:73:3e:d2:f7:58:72:
3e:fa:42:ce:8f:41:7b:6f:4c:83:37:35:a9:5e:ac:45:4b:81:
5c:ed:2c:74:cb:d1:91:a3:45:86:5f:51:e9:98:53:f0:55:08:
d8:15:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:11:43 2025 by rpki-client on console.sobornost.net