Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa
File: 43d698a9-f364-3f11-918e-a3f5a57ed484.roa (raw, json)
Hash identifier: wZ+w6vADp+VNNbB4Niv5BPvGOPft5ks2NeLyAWEmMWc=
Subject key identifier: B4:91:72:BA:B5:02:4A:25:1B:02:C9:28:02:8E:14:81:57:B6:75:8C
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584953C44DA7D3AC6E83DBECCD80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11290
IP address blocks: 104.200.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4d:a7:d3:ac:6e:83:db:ec:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=ae8997a5-9585-42de-9317-a900c1f1c39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3d:7e:23:7a:dd:a6:8e:22:14:fa:6f:fd:fb:
74:c1:49:73:05:ef:c5:1c:d8:11:5c:e9:86:11:4a:
50:fe:0b:c0:d0:44:70:62:48:8e:ba:61:01:bf:0f:
f6:35:ac:b6:b6:79:89:bd:9b:33:3b:19:7a:6b:b8:
88:69:5c:4f:85:ef:80:84:cb:83:75:6d:ca:92:15:
c4:e8:78:6b:91:ca:67:dd:75:71:38:c0:50:5a:82:
e4:94:bb:18:14:be:e0:c4:cc:ac:06:dd:31:b5:2d:
51:c2:89:69:98:ae:00:7c:dc:8a:e0:bb:7e:35:42:
9f:8a:b6:1c:7e:ee:c7:7e:a4:fd:44:66:30:53:6a:
c3:fa:01:2e:25:2c:af:0f:8d:21:e6:67:ef:8b:ed:
88:5f:15:84:78:fa:50:ad:72:e0:9c:d4:6c:d5:56:
d7:cb:bf:95:2e:b8:6b:73:ec:2d:81:71:7a:9a:45:
2f:8c:a0:5f:91:1d:4a:0b:a0:53:55:3d:c8:b3:67:
82:7e:b9:56:a9:4f:34:6d:b7:78:f4:ce:c4:d4:90:
79:64:53:d1:6c:31:5a:4b:90:12:2d:53:f2:58:af:
0f:e3:71:9f:30:f0:e0:8e:57:1b:4c:5e:dd:29:b5:
25:27:ec:1f:d9:c8:6f:0d:16:c3:b4:1f:97:60:18:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:91:72:BA:B5:02:4A:25:1B:02:C9:28:02:8E:14:81:57:B6:75:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.200.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:7d:a3:9c:75:23:92:af:62:86:24:4e:f1:1d:3a:2b:b2:04:
ba:be:0c:d3:63:41:64:35:42:46:50:53:92:c6:d8:3c:75:8a:
a6:df:13:d1:9d:6e:3a:c5:76:49:95:99:af:a3:7f:f8:31:ed:
36:58:8c:5d:d6:e7:1c:fc:b2:71:da:65:6f:9d:b4:4b:ab:00:
a4:2e:32:f9:95:39:06:4a:6b:86:c1:4c:89:c3:09:10:32:5e:
e0:d5:cb:1a:f2:63:04:a7:30:fe:ce:4b:fd:1a:96:70:88:01:
c9:18:4f:20:f7:4c:c4:da:ab:8c:ce:85:67:50:a1:91:93:1f:
b0:96:50:58:6a:06:93:e4:a9:a6:db:82:8a:80:95:fe:7e:59:
5b:28:80:33:91:b7:27:16:e1:11:d5:db:57:76:09:30:a4:99:
51:81:8c:34:e2:8c:fa:97:3b:1e:8d:b0:0e:a1:df:80:8e:48:
40:f4:02:48:92:21:d1:30:76:b2:35:55:90:2c:d8:8b:fe:e7:
d3:ba:e7:8c:dd:56:fe:ec:fd:c2:fe:cc:a9:00:e9:c2:3c:01:
0b:36:e4:0b:12:06:89:e9:76:31:c6:71:b3:df:75:cf:91:b7:
9e:84:c1:88:7e:70:8f:44:15:e5:66:0b:16:3f:66:78:46:de:
da:18:0e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net