Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
File: 60c05e3f-1816-3cff-8958-8504b17b798d.roa (raw, json)
Hash identifier: zUHgcKMgqfbX1Z4D25J5DTidZTM251bMNyVXC+wfr8c=
Subject key identifier: 95:CD:79:C1:D9:A2:AB:FF:3D:E5:51:79:A9:BA:97:B6:31:E5:F2:0C
Certificate issuer: /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Certificate serial: 010D0C9F4328584953C4121D0A0466F49CD7B600
Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 394745
IP address blocks: 170.75.160.0/20 maxlen: 20
172.81.176.0/21 maxlen: 21
2602:ffb6::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:12:1d:0a:04:66:f4:9c:d7:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=13d61e3f-a202-44de-81f3-5d2fd23d61ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:3b:77:90:fb:28:a2:46:00:b2:6a:e7:4e:
89:13:dc:c5:be:d2:ab:e3:b9:28:b9:e9:84:55:07:
3a:35:de:a1:dd:e1:b8:6d:80:cd:3a:95:a8:ea:d3:
19:7e:68:4c:15:be:a6:b6:1c:33:dc:3e:e4:bc:f0:
1b:3e:d8:3b:d5:e8:a9:b1:e3:9f:a1:d3:11:20:d5:
d1:23:f5:fc:e3:9e:b6:48:c6:4e:e7:d3:8f:df:f2:
34:54:90:9d:f0:37:4a:10:63:48:99:7a:fd:78:d2:
f5:61:7d:55:0d:02:d1:e3:a2:6b:f3:f6:2a:4d:d8:
cc:91:1c:a5:e4:ac:35:a4:1d:01:79:2c:5a:1f:24:
14:6e:ee:09:bb:e3:7a:d5:a6:e0:6a:25:29:73:2c:
f2:19:14:94:48:b3:3e:ec:0d:39:ed:43:53:5f:5a:
be:41:24:08:93:1c:a7:1b:ee:6a:92:53:f1:c1:c6:
9b:60:0d:8c:77:d7:81:2f:93:e4:e3:6f:4d:e8:61:
14:e7:cf:50:1f:9c:b4:e7:ad:9d:45:4e:27:85:62:
fd:ab:cf:7d:ef:9a:dd:2d:07:87:24:68:ef:87:69:
df:a0:b7:6a:1b:ed:a0:b4:e3:40:cc:a9:37:62:85:
a5:4f:3f:b0:b8:15:07:38:5b:83:16:78:b6:dd:ad:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CD:79:C1:D9:A2:AB:FF:3D:E5:51:79:A9:BA:97:B6:31:E5:F2:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl
X509v3 Authority Key Identifier:
keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.75.160.0/20
172.81.176.0/21
IPv6:
2602:ffb6::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:97:28:62:e7:ce:40:3d:7b:c7:c8:d6:34:b7:a4:68:2d:a1:
8a:83:c9:c8:55:fd:12:ae:01:37:1c:3b:aa:6a:35:ed:f5:da:
0e:fd:b1:0a:dc:aa:c4:41:1a:67:d4:ec:a2:8b:0f:c2:08:98:
1e:1d:1d:1e:97:1a:d3:3e:b2:b4:2d:ca:1c:e9:d8:97:68:82:
b0:e7:14:dc:7c:1c:f1:0a:51:9a:90:8c:75:c0:87:30:99:2f:
81:52:94:48:de:cb:d0:91:a8:e7:b9:d4:c8:c5:a6:d6:bf:78:
d9:45:46:51:80:5e:68:13:56:fa:6b:2a:38:48:c8:a0:11:22:
d9:a3:3a:2e:92:dc:a0:74:02:4e:d8:31:8f:ae:04:6e:ba:f7:
93:2a:bd:9f:2c:67:85:05:b9:40:bd:20:ce:24:b4:75:1d:b5:
4d:a6:5a:eb:a1:86:74:d7:67:ad:53:de:a7:53:68:4b:04:a2:
e9:82:3f:d1:bf:7c:79:6c:e7:ab:19:98:9f:9c:bb:ba:5a:ef:
af:66:cd:80:73:e6:49:27:c9:6d:d0:72:4f:3f:f2:9c:76:d8:
c8:9f:1c:69:f1:55:5f:d8:5d:48:fa:c3:44:4e:a2:1f:bb:a2:
76:77:a7:41:94:d0:da:65:9e:05:07:0c:d6:87:d0:ad:56:00:
28:4a:37:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:48 2025 by rpki-client on console.sobornost.net