Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa
File: cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa (raw, json)
Hash identifier: 9vlQlbBH4dzvkMNEWOJFAtiBLpeUU+URAyr1AfAXMjs=
Subject key identifier: 37:F6:35:38:D1:DB:55:D8:72:BA:31:24:70:73:DB:1A:57:D9:A7:F3
Certificate issuer: /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial: 010D0C9F43285849605419916E6752E12DA40140
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa
Signing time: Tue 01 Apr 2025 01:00:47 +0000
ROA not before: Tue 01 Apr 2025 01:00:47 +0000
ROA not after: Mon 30 Jun 2025 01:00:47 +0000
asID: 19229
IP address blocks: 2604:97c0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:60:54:19:91:6e:67:52:e1:2d:a4:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Validity
Not Before: Apr 1 01:00:47 2025 GMT
Not After : Jun 30 01:00:47 2025 GMT
Subject: CN=d59aa650-cb41-4321-890d-b5dab17b4774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:c5:87:50:dc:fe:55:70:7b:3a:85:a2:7b:
53:7e:50:a7:6e:6c:62:cd:08:d5:86:ea:9d:cd:2c:
9f:99:a8:86:c8:7f:6a:42:cd:8f:7d:fc:50:26:df:
be:22:1c:65:4e:04:22:cc:a3:c3:37:1f:25:34:cd:
0c:54:2e:b5:cc:25:e1:3a:e4:13:4b:8d:4f:9b:24:
96:99:f9:dd:bf:c2:be:07:48:9d:e7:f7:e2:bc:00:
29:aa:95:d2:8c:98:0d:b6:a8:95:f9:7a:f3:c9:17:
ab:9f:ef:70:ca:79:0d:89:e7:79:d5:26:a2:6a:f8:
b3:32:ad:8a:12:6c:2d:97:f7:ed:3c:05:c5:0f:83:
ce:85:d5:6c:ff:a1:8c:99:fa:d7:00:34:4a:2a:77:
f2:5e:50:61:a3:d0:e8:a4:f7:72:d1:58:5c:4b:90:
4a:4e:65:c5:ec:89:51:0f:65:b1:fb:79:ff:1a:6c:
2b:2e:50:d9:9a:c7:ba:f8:47:aa:ba:7d:82:72:d4:
90:6d:6a:ba:d2:6d:13:f1:1d:9e:4b:ca:0c:89:34:
9f:f2:b3:d3:7e:04:77:c6:90:4a:cd:76:32:71:59:
ee:68:ba:d8:68:71:5c:2c:00:a4:30:39:f5:7e:f7:
8f:64:fd:37:d9:dd:95:93:96:60:1c:56:95:45:86:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F6:35:38:D1:DB:55:D8:72:BA:31:24:70:73:DB:1A:57:D9:A7:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/cfb31b8f-a5fb-37f7-a161-9c9f636180c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
X509v3 Authority Key Identifier:
keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:97c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:35:42:61:c7:6c:57:31:95:03:d4:7d:59:e5:91:ba:37:29:
18:b8:11:2d:f7:48:df:18:34:97:41:1a:aa:cd:3a:8f:4b:5a:
10:9a:19:80:d8:ba:35:df:83:6b:f9:e0:c4:8f:ee:1c:99:ab:
47:09:c2:f7:5a:75:4f:e8:3b:d3:d1:85:d6:5a:fb:9f:18:d1:
69:05:a8:06:6b:78:9d:aa:5b:ea:62:03:42:d1:b8:76:8b:cb:
63:16:8b:b6:e8:81:c7:50:8c:65:3e:49:c6:18:e6:08:29:83:
44:1d:fe:f2:55:7e:70:98:f0:a7:40:8d:ce:b9:67:1c:4e:b6:
1c:04:1a:f4:4f:10:ef:7e:0e:7b:cd:0d:fc:bf:11:b0:31:ab:
c2:06:44:d0:8b:cd:7d:de:eb:d8:97:8f:0e:87:17:43:4d:c3:
47:8a:dd:60:6c:c6:83:e0:e6:89:c3:b3:4f:71:65:cd:67:94:
c0:2a:34:d1:e7:79:17:a7:fd:8c:92:0f:c7:d3:22:e9:50:fb:
75:0d:79:cb:ba:7c:ba:cf:b9:d7:01:20:48:eb:3a:a6:90:92:
ff:f9:7c:1b:97:05:12:d1:03:c5:dd:a1:0d:10:3b:60:28:c2:
97:86:12:a1:35:84:1d:25:d4:a1:e0:4b:fb:e5:9d:52:0d:bb:
9d:91:c5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:53 2025 by rpki-client on console.sobornost.net