Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/1598b683-29fe-322e-b9ed-c596ea5defc5.roa
File: 1598b683-29fe-322e-b9ed-c596ea5defc5.roa (raw, json)
Hash identifier: rwf4JEkU0/MHQx6UzuJtKoTsguHKuRIev84nOegkjKQ=
Subject key identifier: A2:67:07:9C:4D:37:FE:DE:D0:52:5A:55:BD:E2:40:96:38:97:C6:3C
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F43285849552955C0ED67D81428C95060
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/1598b683-29fe-322e-b9ed-c596ea5defc5.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 4540
IP address blocks: 69.51.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:55:c0:ed:67:d8:14:28:c9:50:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=ea0454b7-a180-4e7d-a51f-ec12af282e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:39:59:b0:5a:a7:ec:77:2b:b2:ec:b2:9b:
0f:5f:a8:27:d2:64:d0:bf:fd:9e:67:c5:de:49:2d:
c5:cb:97:de:40:7e:90:3b:bd:67:d0:66:bb:86:1c:
ae:88:48:57:bc:5e:b8:80:bc:cb:14:98:cc:63:52:
7c:c0:5c:b2:94:e8:5e:0c:ea:59:6a:b3:bb:c8:6f:
44:a4:8a:07:4a:ab:73:24:08:29:e4:9b:dd:d2:d3:
8a:5a:82:4a:9c:ea:7c:5d:5a:4b:ee:71:f1:39:4d:
78:2b:f1:80:04:a2:47:01:ec:5d:3f:d1:7a:5a:22:
f4:01:3d:34:a7:49:09:f6:2b:dc:6c:8a:bf:83:71:
8c:07:08:5f:f8:0a:f3:af:e4:ff:fa:cf:b2:c0:24:
0b:f1:e7:12:53:a3:f0:1b:65:57:e8:4e:97:35:c3:
d2:a8:aa:54:84:d8:05:42:b7:62:a5:81:9a:1c:b4:
0b:99:85:82:f0:2c:05:11:a7:88:16:e3:66:46:d6:
5c:ca:34:50:c7:6a:e6:73:91:b2:1d:fc:67:62:a6:
4c:eb:2f:f7:89:6d:b2:e3:16:70:ca:88:85:88:cf:
ee:bf:84:1b:31:ab:a1:59:39:b0:b5:3d:35:bc:41:
b2:6c:22:dc:94:d0:94:78:ad:8f:36:10:27:7a:d1:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:67:07:9C:4D:37:FE:DE:D0:52:5A:55:BD:E2:40:96:38:97:C6:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/1598b683-29fe-322e-b9ed-c596ea5defc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
69.51.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:e4:95:aa:c3:ff:7b:a1:5e:b6:7f:f6:49:8b:2a:b8:32:bb:
45:f0:77:67:1c:59:92:b4:04:78:62:12:c5:0b:4b:22:12:24:
32:d5:2c:1b:e3:96:78:63:e4:c7:63:f8:39:51:50:14:7e:f5:
e7:5b:61:74:73:6f:01:f4:eb:89:df:e6:df:b9:a1:1d:81:3c:
e2:21:7e:17:de:f8:f9:34:8c:f9:65:d4:5e:ec:01:13:4c:01:
a1:9d:a0:4c:76:0b:44:df:6c:32:14:c1:cd:0d:b3:85:5b:fa:
c3:7d:c7:89:5f:40:81:31:98:bc:59:44:8c:a4:cc:a2:ca:8a:
c6:25:3f:06:30:5c:87:a9:c6:6b:8e:c3:21:76:a9:e7:5b:c1:
aa:55:d6:54:1c:f4:9b:bc:f0:46:15:c4:b7:bd:9a:85:2a:0d:
e6:fc:e4:1c:84:6f:91:1a:0c:87:a7:44:f5:3f:c3:12:2f:27:
26:43:b3:50:a2:65:6a:a7:f3:be:a4:31:d8:8c:96:20:f8:c0:
dd:26:68:4e:6c:67:c6:01:76:ab:0e:e9:3c:a5:24:30:b8:f6:
52:0e:2e:a3:3e:cf:30:01:31:4f:39:ad:8e:6f:38:bb:65:df:
c0:d9:54:eb:3d:01:21:a5:16:a6:a4:cc:68:a2:26:f9:7b:e1:
3a:ca:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:21 2025 by rpki-client on console.sobornost.net