Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa
File: 9d8b4a39-d907-3704-bc98-36248d887277.roa (raw, json)
Hash identifier: QmoCWflGrzpCmelm3H5Jq91IKMt3hKI9JweL6igCDSA=
Subject key identifier: F6:32:BE:5C:61:64:26:AE:37:0A:86:D7:26:A9:64:98:AE:82:DA:5A
Certificate issuer: /CN=868a77c4-49cd-4821-b1f2-58d35028b0ed
Certificate serial: 010D0C9F432858497ED0EA916556FC630E3B2900
Authority key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa
Signing time: Fri 11 Apr 2025 23:06:37 +0000
ROA not before: Fri 11 Apr 2025 23:06:37 +0000
ROA not after: Thu 10 Jul 2025 23:06:37 +0000
asID: 46970
IP address blocks: 192.189.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7e:d0:ea:91:65:56:fc:63:0e:3b:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed
Validity
Not Before: Apr 11 23:06:37 2025 GMT
Not After : Jul 10 23:06:37 2025 GMT
Subject: CN=85ccc2cd-f193-4e67-bd45-824a4477f7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:57:da:ee:7f:f7:a6:bc:9e:0a:f7:81:f6:
87:65:a9:c1:7f:0d:25:7d:1c:c3:1c:c0:64:17:ef:
67:4b:99:26:dc:f0:f6:7e:46:c2:03:93:06:6e:5e:
bb:3e:ce:74:81:bd:ec:7f:a5:60:95:d7:8a:51:d7:
9d:47:80:cb:9e:99:63:0c:d5:da:b1:ef:14:ab:ec:
57:88:d4:f7:ca:68:4e:69:97:f3:a7:07:0f:11:19:
01:19:fd:fb:36:ad:6d:82:47:82:75:23:0a:7d:be:
5f:1a:0a:f8:0e:fa:18:29:78:82:a1:d9:8d:5a:4f:
49:31:92:e0:07:00:0f:ed:ad:17:66:7e:5b:44:d3:
c6:79:ca:38:77:9b:50:cf:f6:58:a2:4d:2e:0a:96:
e4:05:06:c7:a7:83:3f:66:05:c7:1e:6a:1f:05:62:
29:f3:c3:fd:29:14:f6:22:16:64:b5:0b:e1:7d:06:
d4:56:b2:57:13:fd:36:ae:f7:22:a3:9f:48:f7:cc:
8e:15:65:cc:f6:ec:c4:7c:13:28:6d:7e:ca:17:5c:
b1:f9:47:30:82:6f:7d:48:eb:31:52:b9:b7:7a:57:
e1:35:87:76:94:8a:cf:b8:15:98:20:20:af:fe:30:
e2:bd:bc:77:b4:ac:da:07:c0:fc:81:c6:5a:c6:0c:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:32:BE:5C:61:64:26:AE:37:0A:86:D7:26:A9:64:98:AE:82:DA:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl
X509v3 Authority Key Identifier:
keyid:A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:f9:91:32:86:44:a3:90:dc:7f:4d:2e:d3:0d:45:4a:5d:dc:
2d:88:89:50:7d:50:35:2b:0e:46:b1:24:90:6b:a5:0f:1a:97:
86:87:09:d3:e4:d2:90:45:4c:cd:75:e6:36:cf:2c:e0:e4:e6:
2c:21:8a:00:95:47:b2:00:ec:1d:4c:d2:a6:96:db:ef:46:ed:
8c:2c:5a:94:2e:c4:34:07:60:0a:56:46:9a:78:7f:6a:c7:ed:
3d:2d:db:84:c3:3e:94:4d:bf:c6:fb:2c:74:a8:ec:d6:7e:ec:
9c:f3:7e:b5:b7:3f:af:ad:a3:24:2a:56:f1:12:af:09:6e:29:
24:65:be:bc:94:bb:f2:3e:40:05:ca:cc:5e:9b:ef:83:94:7d:
d1:9f:cb:f1:2f:d0:0f:10:a0:d7:d3:95:c6:07:56:01:6d:a1:
3d:55:7c:fc:86:f7:c0:1f:a6:8b:28:0b:d2:85:2a:2f:66:c0:
2f:36:08:4d:76:e0:aa:50:45:55:74:65:c5:52:24:0f:28:b5:
86:c5:d9:ac:3b:2d:bf:f2:e9:ba:ca:65:12:a2:cc:66:84:a5:
00:20:08:b7:d5:b6:45:cf:4b:e1:0c:77:fc:d0:84:26:96:ec:
8a:c9:1b:ab:aa:20:7c:c8:bf:76:62:09:1f:3c:c7:0a:6c:87:
8a:37:85:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:15 2025 by rpki-client on console.sobornost.net