Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/e60c34b9-98b6-3580-a50f-f981b1acc7f7.roa
File: e60c34b9-98b6-3580-a50f-f981b1acc7f7.roa (raw, json)
Hash identifier: U9PvRrv0HrslnugLPV36Gt45DEjI9ckd2l82aAuluLM=
Subject key identifier: CB:83:98:2A:BF:26:D1:15:40:DC:73:0E:45:B2:50:54:AF:1C:7F:F7
Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial: 010D0C9F43285849244E6825F5677362B00E1680
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/e60c34b9-98b6-3580-a50f-f981b1acc7f7.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 2572
IP address blocks: 204.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:68:25:f5:67:73:62:b0:0e:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=ada85e2b-825c-40c9-b65e-7a39c3ee63cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:a4:9c:51:06:b0:d3:b9:61:d5:20:54:a3:
99:00:c6:40:a8:69:c1:52:66:6f:45:81:b9:b1:47:
62:5a:d0:fe:ad:64:cb:10:89:7d:14:a3:49:9b:52:
eb:19:b1:23:a0:cd:ae:3f:21:92:b1:c1:29:d9:e0:
ed:ee:b2:56:f9:91:5c:23:97:92:bc:ec:3b:33:59:
37:96:77:9d:4b:97:f8:cc:af:13:43:35:56:2a:b6:
21:15:b6:d8:0f:4a:10:59:5d:ec:ef:f4:69:e4:25:
e0:cd:c5:3d:e6:23:0d:6e:52:05:2f:49:47:d4:69:
c3:4b:5b:b4:43:02:df:74:01:4c:51:19:c4:9a:9b:
dd:da:3a:c2:38:58:10:d9:57:91:52:07:37:46:ee:
e4:86:83:da:ab:a9:0f:3f:a6:a0:11:2e:42:00:d9:
c8:d1:1a:bb:25:f9:d8:8f:ac:a6:0a:4a:0f:92:cf:
c1:8d:db:50:b2:d7:fd:11:34:00:32:ce:d6:de:f1:
0b:30:08:1e:72:9f:23:f3:74:d5:30:d1:b5:ef:25:
45:c2:d2:d0:dd:c1:bc:2f:33:23:44:e9:2d:f6:41:
a7:10:f6:5d:0c:7c:80:ae:2e:6c:6b:a6:ca:2c:ae:
d1:35:33:40:24:e8:52:5f:a8:7b:8c:3c:22:33:70:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:98:2A:BF:26:D1:15:40:DC:73:0E:45:B2:50:54:AF:1C:7F:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/e60c34b9-98b6-3580-a50f-f981b1acc7f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
X509v3 Authority Key Identifier:
keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:62:fc:a5:6a:91:aa:74:f2:a1:0b:ce:e5:64:43:54:a9:cf:
24:78:ac:84:67:ca:20:ef:75:29:9c:6f:d4:fc:34:f2:89:e9:
d5:fc:73:87:58:19:66:70:d6:d6:43:15:3e:f0:ed:0b:c4:76:
df:34:2e:81:9f:7e:50:b7:b2:3e:db:6f:63:59:ee:58:19:6f:
b1:2e:5f:c1:28:9f:ef:94:5a:79:ab:88:b7:32:09:5d:ce:d0:
11:cc:f2:6c:d9:d9:67:05:90:a9:42:a3:59:9d:77:fc:cf:d9:
8c:bc:4e:39:54:64:60:92:7a:02:5e:7b:53:ca:88:c6:71:4b:
fc:f1:dc:3a:cc:a6:f2:9d:fe:0c:48:d6:f4:e1:1a:03:b2:3a:
ce:cb:26:09:14:46:58:9c:ef:34:d5:cf:d3:5a:8b:50:28:6a:
67:f2:aa:1d:18:07:cf:5b:ac:8e:9a:3f:45:bf:d4:db:74:a5:
57:20:81:ac:65:9b:7c:44:56:62:40:27:ab:d1:d5:a6:2b:e9:
78:6c:ae:f4:a4:7c:1e:f6:6e:e1:7f:5d:ed:a5:b5:04:54:48:
98:a3:e1:2c:39:0b:8d:b5:fe:9f:09:b6:b0:a7:ad:a4:87:8a:
8d:3f:8e:e8:5e:0e:20:0a:e2:12:46:77:23:14:00:e6:ac:f0:
3b:a2:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:14 2025 by rpki-client on console.sobornost.net