Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa
File: 87e18ed9-a210-3d88-b807-6e991937baa5.roa (raw, json)
Hash identifier: L9a+79yLrIFAh5IBQMaQwppmXrDkNv9ZlY7uRzYKPOo=
Subject key identifier: 43:30:E7:C8:19:61:0C:1B:B8:7C:BF:62:5E:EF:21:C4:D7:2A:84:5F
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584981D45FA7F9DFDB76228E8800
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 398993
IP address blocks: 104.233.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:5f:a7:f9:df:db:76:22:8e:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=abd7d284-c2ae-49d9-8082-65e20d907eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:1b:39:4c:e1:a6:30:15:d2:2f:eb:55:ad:
af:49:24:3f:d2:43:d5:6c:c9:3d:c8:17:9c:a1:aa:
98:e8:b7:13:2c:3c:40:d2:6a:22:77:b2:3c:71:8d:
1c:a6:12:9f:7e:65:22:94:80:61:54:3a:ef:d7:28:
07:fd:d4:b3:72:a9:21:5e:ca:4c:69:1b:87:7a:b2:
0e:95:93:9e:cd:5c:06:4f:1a:6e:99:66:3f:06:0d:
47:7e:1a:d5:3d:0c:11:c2:a4:12:75:a7:96:b9:d8:
1e:c0:21:fe:be:6a:fe:ca:c5:76:90:54:2b:1c:af:
59:43:69:21:1c:40:ae:7f:f7:63:3f:cb:45:5f:50:
44:ad:65:72:4c:b6:2d:5c:42:44:83:45:c6:fc:79:
f5:54:0a:46:24:5d:53:db:61:99:44:8d:ab:e6:5c:
b1:c6:6f:19:12:df:53:f5:06:f4:28:27:2c:8f:a5:
d0:71:e1:12:1a:37:95:80:b0:d5:b0:0d:ae:6c:f3:
94:44:a8:c8:d9:00:22:1b:f7:da:7a:25:0f:ed:c5:
de:dd:32:54:08:c2:16:38:5d:d3:fb:e0:0b:a5:ee:
89:f6:e0:ea:f9:be:e8:63:0b:e8:0c:37:b6:8a:9e:
9e:95:b0:af:52:e1:62:e6:ed:d6:4e:99:4a:e1:98:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:E7:C8:19:61:0C:1B:B8:7C:BF:62:5E:EF:21:C4:D7:2A:84:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.233.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:ee:29:77:71:16:d1:cd:6a:33:c4:ae:fd:89:f9:bc:5d:f7:
0e:bd:7e:4d:da:39:86:c6:04:02:13:f3:2c:df:eb:f7:06:dc:
16:ba:55:a6:0d:a4:da:f5:14:47:65:19:9c:91:45:23:8e:de:
6e:89:33:bc:34:3a:56:e3:eb:9c:4d:bf:f2:db:e4:ae:32:bf:
0d:35:78:65:d1:8c:5c:aa:59:29:d8:a8:2a:8b:b0:3e:00:bd:
93:2b:14:a1:da:6b:6d:99:ab:09:c4:6f:e1:d2:a0:38:8e:59:
a9:41:2f:57:c2:ff:1f:d0:80:d6:69:14:ca:fd:57:29:62:1d:
1e:6e:a0:fb:16:92:ce:19:84:12:cb:08:6b:99:48:15:d5:1a:
18:33:f1:d0:9e:90:8a:a1:88:bb:65:69:32:13:4e:04:03:40:
79:66:1e:12:9e:fc:0d:d0:d6:a2:1b:0b:18:06:b8:0f:ae:da:
af:d1:d5:49:ce:20:af:06:66:ed:6c:6e:48:41:db:0f:04:62:
ab:ed:f7:4d:0f:77:d0:99:72:58:5a:d3:44:63:b9:bd:83:9d:
19:49:bb:e5:c1:ab:3e:a6:de:3c:4f:7c:88:6c:12:35:c0:fb:
71:4c:2c:9a:c1:87:4a:13:d5:76:ff:64:4a:fe:72:5f:7c:af:
a2:39:60:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net