Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa
File: 524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa (raw, json)
Hash identifier: YH9XVOYfgFPS6u/+ZDBv9QpgOq9y2dqOQ8IiuA7SA4I=
Subject key identifier: 1E:4F:A4:06:27:22:2F:D3:A0:BD:C7:4C:09:69:20:00:1B:3E:CC:FF
Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial: 010D0C9F432858495E6EFC9F96D08BE8C96D4840
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa
Signing time: Mon 31 Mar 2025 08:43:26 +0000
ROA not before: Mon 31 Mar 2025 08:43:26 +0000
ROA not after: Sun 29 Jun 2025 08:43:26 +0000
asID: 26658
IP address blocks: 104.128.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:6e:fc:9f:96:d0:8b:e8:c9:6d:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Validity
Not Before: Mar 31 08:43:26 2025 GMT
Not After : Jun 29 08:43:26 2025 GMT
Subject: CN=c96b6e6c-b5d9-4225-a0bc-bc8ef65d4270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:f9:16:5d:dd:70:17:fc:63:c6:e3:ce:c2:
9f:b2:8e:3f:75:59:81:11:8a:77:d1:df:98:c0:6b:
bc:ab:45:f6:2c:60:07:f1:7e:0b:43:87:0f:3c:50:
4f:5e:ac:0f:2e:13:e7:13:cc:f1:4f:81:17:d2:31:
7c:e0:da:01:b0:10:cb:47:d7:e1:26:07:fd:f3:18:
ac:49:ef:49:dd:05:f7:01:34:47:df:6d:07:ff:97:
31:ea:1d:df:44:c6:04:8d:bb:99:b8:b9:38:80:4f:
4a:cd:75:6c:7a:07:7e:4a:4e:ed:7c:df:8c:9e:f7:
2e:90:c4:a4:fd:0a:89:ed:59:7a:dc:e0:b7:c3:9e:
d5:e1:ba:b3:d9:62:4e:91:3a:ab:a9:0b:6c:7a:44:
ae:3d:eb:4a:42:f4:dd:17:a5:83:7a:57:8f:ee:7c:
fd:aa:e5:52:4c:77:d6:bf:a0:7e:16:e3:f6:40:e9:
be:f5:98:1b:54:b3:bc:17:2f:94:6f:4d:36:ce:ca:
73:45:85:6e:09:f7:16:bb:57:fa:9e:8f:a0:c8:bd:
9e:1f:a9:df:af:2e:84:bb:3e:2c:9b:2b:85:2b:d3:
07:39:05:c2:25:5a:15:11:22:20:4a:52:fe:b5:be:
36:f0:a7:6d:4e:94:8f:e0:a8:26:d8:53:7c:0b:a6:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4F:A4:06:27:22:2F:D3:A0:BD:C7:4C:09:69:20:00:1B:3E:CC:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
X509v3 Authority Key Identifier:
keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.128.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:ff:ef:de:3a:47:d6:86:4a:52:58:29:de:6c:93:62:31:3d:
07:74:d5:c1:0e:7b:8a:74:8c:d2:59:bf:88:a1:e5:f1:85:ef:
13:e7:19:cd:36:09:b9:ba:21:fd:16:c1:95:85:d6:af:f6:79:
0a:72:b0:c7:13:ed:af:18:fb:fd:a9:6f:e5:a0:be:a3:69:c6:
2d:c8:68:c8:53:e1:30:77:37:9b:06:04:74:52:9f:89:e2:df:
fe:e2:83:08:e2:76:c4:df:fb:db:b9:04:9e:c2:fb:4a:23:21:
ec:a4:9f:9c:64:91:ef:67:e3:42:cf:61:a0:05:10:3e:b3:45:
cb:a2:3d:98:04:34:a8:06:81:2f:98:07:dd:84:ae:ad:60:53:
cf:eb:d0:c9:3e:08:b7:28:50:44:ec:76:2d:c2:17:9a:b1:58:
a9:b9:4e:1e:ea:f0:3a:75:c2:fc:65:08:0b:6b:b7:3b:ac:e6:
f4:b3:ab:fa:fa:d0:f9:20:3d:42:33:75:6e:30:3b:a1:36:9f:
b0:27:48:6f:d9:26:4f:eb:49:0a:38:63:5c:e6:3b:2d:a8:ca:
12:df:06:df:22:99:e0:74:1c:10:58:ec:46:9b:5f:9d:f2:46:
92:0d:88:d1:9f:6f:01:a0:0c:c6:17:23:8e:43:d9:c3:98:1f:
93:79:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:14 2025 by rpki-client on console.sobornost.net