Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa
File: 3924f1b7-789b-3758-bb3e-78e15e71890c.roa (raw, json)
Hash identifier: RtS8tY3F50Phr3dRoZrSx4rZYoVCsHdazJ+FRnzrr3s=
Subject key identifier: 3B:08:0E:7E:29:56:48:48:B2:DF:47:2F:16:B5:FC:51:F2:22:C6:8E
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584957F4087E56238CFB74801440
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11290
IP address blocks: 72.11.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:08:7e:56:23:8c:fb:74:80:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=6b3ab5d3-3e78-440b-af7f-05ed9f8cf21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:58:ba:dc:f7:1f:2f:0b:f2:67:4b:e5:76:
0f:e8:0b:89:d9:2b:6d:9a:31:3d:54:4e:37:6c:e8:
46:82:64:13:7a:3a:7d:01:83:07:d0:ab:70:3a:de:
65:90:a0:6e:fd:3f:46:e4:29:09:0b:7b:46:65:1b:
4e:4b:90:12:2b:d3:a0:3b:40:c5:a2:7c:f1:2d:a8:
fd:aa:85:60:2c:55:89:87:5e:8e:9c:c5:46:73:60:
f9:6a:cd:34:1e:a3:89:dc:05:d1:65:df:48:a4:fd:
c7:69:55:2c:3d:9f:cd:21:23:47:75:9d:ed:1e:df:
9e:cc:5a:ee:98:ba:91:ca:83:65:f9:b2:5a:f1:20:
7d:12:dc:3b:6c:53:14:ee:2e:4d:8c:70:c2:87:76:
fa:f8:67:d5:75:a2:5f:d9:55:4a:50:93:d8:a6:37:
3b:04:e8:e8:96:db:da:32:db:5f:10:75:39:95:1e:
a1:dd:5a:11:bb:ee:53:cc:00:71:53:27:39:9c:31:
76:a7:c4:1d:9b:dd:cd:90:ef:a0:d0:89:4d:ed:a3:
12:41:74:cf:9c:97:0f:a2:71:b9:1d:4c:b8:6c:f3:
81:64:87:4c:d7:91:b7:4f:f3:87:87:47:88:db:d1:
b6:71:78:29:7a:d9:89:a3:90:c6:1f:ca:96:b2:29:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:0E:7E:29:56:48:48:B2:DF:47:2F:16:B5:FC:51:F2:22:C6:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.11.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:2e:8f:3d:34:f0:72:e2:32:65:48:0c:67:91:9c:9d:32:63:
42:eb:91:31:5f:17:d8:b0:f1:e8:13:ba:44:7a:08:dd:16:71:
3d:61:17:55:c3:b3:49:0b:f2:8c:40:41:ad:1d:e3:2d:03:e0:
cd:4c:29:32:35:c5:a0:f8:18:7b:53:25:b5:78:8a:ed:53:56:
bc:bc:1a:ec:a1:17:05:03:bd:21:15:9d:93:64:db:82:76:16:
16:c6:56:95:78:e1:b6:66:16:8f:de:f3:84:57:c6:fd:90:08:
55:a2:8d:00:29:2a:58:bc:3f:c1:ea:8f:c1:d9:b9:cf:4b:f1:
1f:6f:13:ee:93:8e:d1:bf:15:a2:bd:ae:68:e3:f0:fa:0d:9b:
5a:a1:38:a6:63:13:30:9a:5b:50:5e:9c:c7:06:53:84:53:c0:
53:13:89:bd:91:4a:20:c5:90:15:b2:f3:14:27:4b:2c:d8:31:
1b:3c:ef:70:00:d9:35:4a:5f:81:c7:d0:2e:3a:f2:83:d7:84:
cd:a1:0f:42:a0:33:0b:04:40:73:46:89:8d:c1:4b:a6:bd:96:
3d:17:ad:44:12:be:19:4e:83:69:e7:5d:31:ef:66:ce:88:40:
fc:d3:b9:3a:a5:f6:02:89:9d:ec:e1:a4:62:03:3d:a5:e5:4d:
d9:4b:13:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net