Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6d9c723-f8f6-335d-9a51-f547dbf429f4.roa
File: e6d9c723-f8f6-335d-9a51-f547dbf429f4.roa (raw, json)
Hash identifier: sMd3Th3b4Rnb+XKFqHefXUiIfykAd/sfCMxX91U6AIc=
Subject key identifier: 17:3B:8B:AC:CB:3A:8F:73:40:35:33:6D:71:40:1A:CD:B8:3B:D8:55
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B267AF88EFC8135B3FE5CFE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6d9c723-f8f6-335d-9a51-f547dbf429f4.roa
Signing time: Tue 28 Jan 2025 17:49:41 +0000
ROA not before: Tue 28 Jan 2025 17:49:41 +0000
ROA not after: Mon 28 Apr 2025 16:49:41 +0000
asID: 33651
IP address blocks: 71.198.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:67:af:88:ef:c8:13:5b:3f:e5:cf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 17:49:41 2025 GMT
Not After : Apr 28 16:49:41 2025 GMT
Subject: CN=0a7236da-d07f-4bb9-8a94-cdf3dda8b21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:1f:6c:0b:e2:3c:bd:e9:a1:9e:98:d9:73:
fc:ca:0f:bf:6a:8c:34:b7:b9:72:f0:7c:1f:ed:10:
62:99:e0:22:8e:09:02:d7:68:3c:be:0e:60:f4:14:
2f:33:8a:96:73:91:92:36:14:42:6b:a4:9a:a6:cd:
d5:f2:41:e6:04:22:fb:fe:12:f5:f0:6e:9a:76:8e:
70:c6:e1:a7:1a:92:9c:b0:e4:97:da:db:be:78:77:
a2:69:11:5c:43:b2:e4:8f:27:54:a2:5e:d5:7f:56:
47:36:a0:27:2c:ed:1d:2e:1f:a9:c8:d8:67:a4:ce:
39:a1:11:49:47:82:80:5e:d6:0e:29:bf:94:f4:49:
5d:8f:13:8a:8a:69:21:02:a5:86:b4:ff:50:0f:1b:
0e:31:e9:4c:cc:55:7c:83:a8:c6:c0:1c:0c:e9:ab:
d0:98:1b:e1:82:f9:34:80:31:f4:98:45:e8:39:84:
80:46:79:6d:d9:5f:14:16:c8:d4:cd:a5:f1:79:83:
b2:ea:ca:a7:20:74:78:4a:6a:75:0d:b2:f5:79:cd:
96:0d:d5:27:f0:bf:02:81:54:52:1d:08:fe:bd:b8:
de:0d:1f:76:eb:d0:bd:79:f6:0a:cc:65:33:11:eb:
86:ae:3a:c7:50:22:76:ad:0f:b2:3d:48:7c:09:fd:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3B:8B:AC:CB:3A:8F:73:40:35:33:6D:71:40:1A:CD:B8:3B:D8:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6d9c723-f8f6-335d-9a51-f547dbf429f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.198.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:70:72:35:9c:84:a4:06:df:41:0d:5c:cd:fa:9d:4e:ca:ca:
8a:43:1c:e4:31:04:a0:3b:78:f0:66:0a:5f:63:e7:24:a7:9a:
2c:ca:eb:ea:05:64:73:47:d9:48:f4:c0:b5:31:d0:4c:ac:89:
b1:0e:9b:65:b0:34:9b:72:19:f4:c5:bc:f6:92:98:74:fb:99:
42:de:0c:98:cd:ee:d2:ca:e5:23:71:a5:c9:23:1f:f2:c6:9b:
89:ec:47:04:ec:ba:52:55:76:d0:6b:9e:f1:a1:e5:25:92:1f:
5b:90:8f:91:2b:5a:e7:f1:71:61:7f:96:29:9f:f0:f5:21:41:
43:08:14:9d:c2:ec:17:10:32:a9:52:cb:93:3b:67:9a:86:5c:
03:ea:78:30:e3:c8:60:9b:67:35:39:ed:96:d2:90:a0:dc:de:
aa:c1:59:92:b0:84:2c:e5:7a:e3:11:75:06:f6:ca:d5:68:a5:
c6:4d:34:29:06:1d:3c:5b:d6:08:74:4f:95:2b:d5:4f:52:24:
49:a5:0f:ff:76:42:13:e8:35:5e:fa:5f:c3:73:33:e6:30:d4:
16:3f:0b:3f:6b:76:cc:7f:30:5d:4a:3b:bc:d4:9b:9a:d8:17:
9a:9b:f9:91:b3:e3:12:fe:af:5e:3c:7b:68:6d:19:51:fe:55:
c0:ab:ab:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:19:21 2025 by rpki-client on console.sobornost.net