Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa
File: cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa (raw, json)
Hash identifier: zDZlF4rruG26GiSlAjjiqitjc+sMaXRQz2IlZd5ZH+o=
Subject key identifier: AA:04:CF:FD:3B:1A:87:63:8C:30:18:CB:0E:65:79:21:92:DD:D0:6A
Certificate issuer: /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial: 010D0C9F432858496CE455603DC94EE7CF464500
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 14618
IP address blocks: 64.95.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:55:60:3d:c9:4e:e7:cf:46:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=8218583a-6d7e-47e8-babc-e778e09bc77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:db:84:88:a6:8d:4a:41:91:16:84:de:9c:
73:4e:a4:8a:a9:7f:8e:17:ba:2f:21:dc:36:bc:6f:
3b:1e:a3:3d:e1:46:de:b3:42:d6:b3:41:77:34:e9:
d2:84:c7:af:ce:7d:bc:2a:3e:e4:b8:f1:0c:4e:ff:
9e:81:c8:ba:16:77:17:28:4c:5f:34:7f:82:f9:01:
aa:cc:70:2e:aa:8e:cb:73:a0:33:08:65:fc:27:6d:
0d:d9:49:35:00:f7:2b:b0:e1:9d:83:02:ca:6c:a7:
91:12:9c:d9:68:3f:65:7d:49:26:70:14:f4:2a:54:
01:96:90:f8:c2:25:f3:25:a3:10:4f:3e:5a:48:b7:
c8:b5:af:49:70:12:85:5a:40:9d:f4:5e:0e:86:ac:
16:b6:31:39:12:bd:ae:04:cb:27:d5:1d:3f:47:b9:
1c:6e:d2:9c:21:8c:6d:44:60:e5:ec:ee:6c:80:ca:
30:08:d3:bd:9f:34:55:1d:8a:2b:9c:fa:06:db:59:
9b:f7:1c:fd:35:a8:37:b9:c0:e9:08:3c:f4:75:3c:
00:ce:58:8f:c4:6b:cf:ac:36:45:2f:18:b7:cc:7a:
70:1d:58:34:52:0d:ae:d9:05:49:cd:f1:7a:93:89:
38:9e:91:45:88:81:3e:12:5f:50:3b:5e:f8:47:c4:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:04:CF:FD:3B:1A:87:63:8C:30:18:CB:0E:65:79:21:92:DD:D0:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
X509v3 Authority Key Identifier:
keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.95.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:14:59:e2:17:d5:56:fd:b8:5e:93:0e:40:34:ed:84:f0:0a:
66:a2:cf:d2:31:92:fc:9e:88:b9:29:fd:2b:1c:de:f9:b5:68:
62:da:b5:a8:28:f0:ea:9f:84:ce:51:57:47:bc:8c:8b:f0:83:
6f:b2:7a:b5:e1:ac:7e:ae:c5:d2:da:49:0e:87:ef:60:ab:84:
bb:69:2d:cb:14:4b:0c:37:d4:d7:4b:dc:0b:ef:6e:ea:ea:a1:
12:34:8f:38:0f:2d:e8:9f:19:75:62:42:2b:f8:12:08:82:4d:
a6:34:a8:b3:7d:ea:c8:06:71:71:2a:85:9f:50:75:c2:6e:42:
ff:23:de:4b:25:d3:49:2a:73:25:43:d6:82:69:94:31:06:0e:
46:e3:bf:15:5a:58:37:b1:c0:d5:e1:25:d9:ec:28:fb:f1:8d:
58:b9:00:be:c1:10:e5:8f:3e:c5:70:8f:b4:c3:05:9d:ee:e1:
15:4b:66:ea:c9:3f:ec:14:84:ca:bb:2f:a6:c8:fb:3b:f2:f8:
18:b9:80:cc:c0:14:8f:33:67:93:f7:d7:13:e7:9b:ca:b1:59:
61:26:60:ac:a5:32:43:88:72:46:d5:3f:89:5b:df:23:94:87:
9b:6a:06:0d:f2:56:f2:2b:96:c9:73:f8:e0:36:b3:5a:70:9d:
86:ae:b6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:53 2025 by rpki-client on console.sobornost.net