Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
File: 6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa (raw, json)
Hash identifier: iV7Dxk9xxzQgH1+99n0FAx5SZElUw5hkDj6X+7C0NIQ=
Subject key identifier: 98:B4:A8:4B:2E:7F:0F:CF:C3:95:70:38:2F:A2:E1:81:06:51:9A:99
Certificate issuer: /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial: 010D0C9F43285848DD3BAAEEA55C3BA9CF627180
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 393950
IP address blocks: 104.167.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:aa:ee:a5:5c:3b:a9:cf:62:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=1844a218-01d9-448f-b5f7-62b4ae3e3888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:39:2b:0b:c7:6f:eb:94:55:7e:18:85:89:
74:0b:c6:08:6c:09:c7:60:c1:ab:20:f6:6a:fc:9a:
3b:86:9f:43:0b:a2:cc:26:65:c4:72:d9:0f:46:3a:
d2:22:b5:ec:0d:0e:c2:a9:d6:b2:f3:8f:e8:45:22:
6a:a5:05:65:8b:41:05:1f:56:5d:49:ba:6b:5f:d3:
a1:a9:0a:5d:fe:3e:85:a3:cf:9a:c6:d7:e0:4e:92:
ae:33:fb:82:90:cc:9a:8a:7c:35:00:ff:33:74:ed:
ac:c5:f5:4f:9b:be:01:76:00:b3:e8:25:04:d0:8a:
f1:45:3f:1b:a7:2e:5e:61:7e:a8:9b:c8:71:7a:6d:
1a:a0:55:e3:b3:e8:72:fc:23:b0:f8:45:dd:2e:89:
78:3b:5a:85:c7:c1:6d:e9:03:46:a6:ac:47:f6:38:
ae:fb:1e:be:87:23:66:af:ff:78:41:aa:f8:91:ab:
cc:be:d8:c5:d1:19:e4:30:47:67:a9:f2:ca:55:a2:
c4:09:03:56:01:e0:46:0e:bb:c2:45:15:a8:be:56:
8d:a0:04:70:4f:f5:8a:8c:a5:8e:1c:b5:88:f5:77:
2e:3b:1f:18:f5:51:16:72:c4:a0:93:ad:5d:61:7e:
89:2e:86:7c:ca:db:82:ed:5f:42:da:41:65:ee:c7:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:A8:4B:2E:7F:0F:CF:C3:95:70:38:2F:A2:E1:81:06:51:9A:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
X509v3 Authority Key Identifier:
keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:e8:3b:60:17:91:6b:e1:93:d7:13:b6:1c:96:6e:cb:82:56:
dc:18:0e:f5:1d:38:9e:fe:64:fd:91:45:62:c8:9b:85:c7:23:
a8:20:f6:fc:4f:e0:84:5e:e9:b6:9a:be:a6:05:5e:22:96:f2:
43:0e:ac:5b:15:4d:ec:c2:91:02:c7:d8:85:72:10:73:70:9c:
ea:80:3d:5b:e3:61:db:5f:76:d2:18:c8:26:82:4a:e7:a1:39:
0d:8a:58:08:8c:b6:e3:38:78:9b:75:6c:dc:96:d1:16:c5:1c:
5f:66:d0:36:6e:a8:43:91:28:5e:57:82:fe:e2:b4:e9:0f:50:
d9:17:ec:1b:09:fb:86:f2:35:4c:4e:0b:45:2b:29:2b:7c:d4:
e5:1f:3c:94:d6:c9:c8:03:36:87:ab:86:43:5d:84:b7:0a:fd:
93:98:9d:90:65:50:18:d6:c8:37:9b:af:ec:88:25:08:3c:3a:
76:48:56:bb:0a:0c:9f:dd:f7:9c:a3:81:23:53:3e:b0:aa:1c:
f4:c3:ac:70:23:66:f5:fb:0e:e3:45:90:ab:13:fb:5c:f6:50:
1c:68:b2:40:65:52:f6:2b:63:91:65:ac:7c:ef:25:d5:a2:50:
94:1d:80:7d:8d:8c:cb:75:ca:66:02:3e:98:83:72:ed:08:59:
b2:74:e0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:48 2025 by rpki-client on console.sobornost.net