Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa
File: 98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa (raw, json)
Hash identifier: al4lZsUfKKsPWlS37czXGqZNjt3ZisZePu2+5f5KQHE=
Subject key identifier: 30:85:3E:37:79:17:DF:B1:48:CC:09:EB:3B:9C:FB:BF:0E:83:7D:1E
Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial: 010D0C9F432858498339F5CEDB1ECA51FC942D80
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 14555
IP address blocks: 170.10.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:f5:ce:db:1e:ca:51:fc:94:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=b30b3bb7-703e-4730-a18a-603a4acf813b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ab:e4:78:e1:ad:ff:44:34:7c:d0:4e:84:a9:
c1:68:f0:75:dd:42:3f:e0:fb:64:e9:08:b0:53:2a:
e4:44:b6:6d:b4:aa:59:1a:b4:7b:20:42:f4:18:18:
fe:c5:34:cc:74:67:4f:44:0f:83:03:d8:a9:ed:e7:
77:1b:b9:4d:d2:73:1c:a9:b1:d5:b7:c6:cf:92:35:
4c:b4:2e:57:99:e6:11:6a:77:ba:b7:e7:59:4c:bc:
d4:87:d1:01:fc:60:56:3f:f0:ee:57:13:d1:3a:2b:
28:6b:45:dd:8f:c5:ae:30:92:d4:54:6a:6e:0d:45:
be:f6:19:4d:ac:89:4d:9d:11:79:70:0e:7a:d5:9a:
f7:6a:39:05:78:bb:e2:dc:d6:54:ed:b5:13:d1:8b:
90:21:52:f7:38:fd:2c:5e:ab:4d:2d:28:cf:4d:d2:
86:20:26:32:9f:f4:84:fd:1c:2c:76:c7:62:2b:4f:
37:92:ed:23:96:4c:6b:47:b0:ce:32:b7:6b:7b:ec:
d2:60:10:81:2a:77:2e:45:6c:5b:1b:46:7e:fc:19:
12:18:e9:ed:cc:d3:4c:c3:01:52:46:9d:9c:50:86:
61:eb:9d:27:8c:a0:97:4e:5a:7e:af:c7:f8:d7:2b:
fe:17:9f:70:00:10:c7:bf:31:fc:a0:e8:75:5d:53:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:3E:37:79:17:DF:B1:48:CC:09:EB:3B:9C:FB:BF:0E:83:7D:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
X509v3 Authority Key Identifier:
keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
sbgp-ipAddrBlock: critical
IPv4:
170.10.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:53:3d:35:ed:77:a6:a2:1d:fe:6b:88:eb:ac:95:f1:67:c4:
ac:de:dc:82:1c:02:cf:d1:04:98:92:e5:59:1c:f7:82:40:b0:
22:ab:3d:2c:d5:a4:f3:eb:d9:9d:7c:52:a3:db:33:38:e1:1e:
3f:12:84:b6:1c:e7:4d:39:4c:d3:8b:e1:1a:29:b9:4e:6a:4a:
67:d1:be:57:1c:1b:d3:4f:13:ff:80:2d:6e:6e:58:f9:48:ea:
28:9c:9c:84:cc:a0:ae:f4:60:1b:27:85:19:b9:84:ac:f2:f3:
2d:43:30:21:e8:a5:ce:06:26:ff:86:3d:3e:95:03:a0:e1:0c:
53:ef:d8:31:ad:85:3f:eb:65:96:8c:b9:e0:cb:2c:c7:2b:a1:
1e:59:6f:d9:95:3e:d3:bd:e0:30:21:bf:61:62:83:b7:0b:17:
54:51:25:7a:b6:dc:ec:6c:4e:4c:97:98:aa:f2:1d:0a:9d:3f:
f6:09:92:48:8d:35:2e:60:a8:0a:37:04:02:ed:f7:38:ee:87:
aa:75:b7:ee:e7:53:09:61:3f:e4:26:bb:24:8d:01:5d:a3:ec:
db:68:2a:0f:b1:6a:3f:8c:a1:ad:10:a1:25:30:99:1f:81:2e:
0c:4e:61:2c:b4:b2:4c:e0:cd:51:16:4e:37:d3:2e:4c:1e:1d:
77:3b:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:14 2025 by rpki-client on console.sobornost.net