Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa
File: cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa (raw, json)
Hash identifier: vPCm7rPAL/5yvHUqJGxcr9tZPOU+DOAu1NX5krRxHdo=
Subject key identifier: A1:B4:8A:80:97:83:60:90:B3:92:2A:A8:18:A2:6D:06:95:B4:54:BD
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848CC7B94EB34D9E8214D5C8E80
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 64.4.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:94:eb:34:d9:e8:21:4d:5c:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=2bb56035-6d7c-46ff-acc7-4280b0338479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:6f:48:2d:10:72:05:c8:ce:a3:fb:8e:b8:
93:ce:7f:32:0c:ad:1b:5a:d4:42:3f:f3:d3:0c:86:
59:6c:b9:a3:6a:49:be:07:43:ac:1c:7f:91:c2:40:
b6:ed:62:71:58:29:99:67:70:5a:6f:d5:07:96:3a:
24:17:88:e0:aa:8d:ed:dd:1e:ec:9e:d6:a6:05:b2:
8d:f5:cf:e4:4f:9e:87:6f:a5:81:72:26:0d:6d:87:
4b:cc:91:20:8e:4d:7f:2b:5d:6f:24:21:6c:6f:6d:
ed:1b:f7:84:50:0a:01:5c:fd:ca:7b:2f:ea:8c:63:
cf:9f:92:17:05:b5:6c:d9:c2:98:e0:ea:71:88:11:
2d:63:ae:3b:cc:3a:77:8c:c7:6e:ad:76:05:80:d0:
35:1c:d1:fe:83:78:62:17:ad:5e:3c:3e:06:56:66:
f6:32:e2:b5:03:31:7a:49:a7:d4:79:0c:cc:5b:d3:
5f:1b:e0:c9:7f:f4:88:c8:69:3f:c9:ab:bc:95:d6:
81:a3:f8:95:6c:c8:03:77:a2:df:7a:01:e0:d8:45:
be:65:de:44:75:12:5e:c8:d0:f3:84:31:fc:ec:91:
6b:45:f9:5d:37:34:23:27:70:7f:b4:40:a1:ae:a0:
6f:d2:6c:72:63:97:81:43:21:78:34:56:31:57:5c:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B4:8A:80:97:83:60:90:B3:92:2A:A8:18:A2:6D:06:95:B4:54:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:1e:06:ec:9d:5a:32:a3:7e:72:59:6b:b1:ae:63:8f:b3:6c:
3e:6a:8d:fe:2b:8c:f3:00:ac:51:ff:d8:14:f1:26:7f:f9:4b:
88:1e:5c:e6:ba:40:90:0f:7e:99:ab:c6:12:88:91:6e:c5:ba:
3c:11:91:34:2d:72:58:57:42:e2:cf:7f:3d:a3:54:2f:26:58:
76:83:bb:07:fb:48:bd:c9:a6:74:e7:59:ac:f4:bb:06:49:f4:
32:41:8a:e5:d4:41:2f:69:bc:f6:23:20:f6:19:da:cf:e0:bf:
5c:ff:fa:6b:27:3b:73:0a:96:71:93:4d:5d:40:72:f2:e9:21:
7d:84:38:f7:74:62:8c:59:f8:a0:2e:5d:b5:a7:80:32:ea:63:
ff:e0:ca:f0:f1:a6:cb:6e:e7:93:db:55:c6:47:2f:1c:b9:7e:
b1:dd:40:60:8f:ed:cd:f5:a0:8d:85:a2:24:5e:86:15:9e:06:
2a:23:64:bb:21:ac:1e:40:3e:74:cb:d5:9d:12:d7:6e:db:d4:
6e:30:42:17:a8:64:fe:52:18:42:4f:5b:e0:3f:be:ba:34:8a:
ac:44:42:57:10:a0:bf:8e:03:6f:2a:d5:e4:2b:bf:56:45:27:
09:e3:ed:39:09:03:af:e8:46:de:f6:d5:88:68:99:fe:dc:c5:
58:10:7b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net