Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa
File: d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa (raw, json)
Hash identifier: D91wjDE7J9TN8ix9e+08h8hLDP9gy4j1SEsNTy7BDPI=
Subject key identifier: FC:90:9B:49:54:66:AC:93:B7:95:8F:E6:76:60:82:0A:74:F8:CD:0E
Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Certificate serial: 010D0C9F432858491ED6DE37BA0FAAB87C539278
Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 210781
IP address blocks: 104.249.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:de:37:ba:0f:aa:b8:7c:53:92:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=0bd79af9-281c-4d9f-80af-52894f352811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:02:2a:b4:e0:06:51:46:f4:d0:ef:b9:19:ea:
b5:d9:ed:e3:7c:ce:53:13:27:98:a0:f0:eb:23:c4:
53:e0:96:6a:c2:b8:91:3c:7c:a4:23:e6:a7:46:99:
51:eb:56:53:e5:db:a5:1a:ac:bd:74:40:c7:db:04:
aa:9a:29:64:78:e4:fb:e5:c2:85:a0:44:04:22:ef:
7a:e3:2e:60:37:33:78:be:ac:43:f6:aa:dc:cb:c6:
cb:b9:1c:4f:08:10:31:93:5c:b0:02:b9:c7:20:19:
a6:98:55:94:98:bc:d5:7b:a0:ca:9d:20:31:65:c3:
9b:33:9e:a5:51:ba:ce:4d:30:07:5a:d6:11:ca:3f:
b7:f4:26:36:d0:ed:1d:7f:b4:16:bb:8c:cc:6b:e5:
7e:ef:e3:15:41:9d:4d:f9:5b:2c:96:67:ef:22:9a:
cf:ec:0d:d2:3b:13:74:f8:aa:b0:c2:95:b7:4b:c6:
6d:7d:38:72:4d:57:c9:61:e8:f3:e7:6e:70:d0:4b:
2f:4d:94:a8:43:95:bc:3b:8f:4a:18:ab:4c:82:0b:
a7:24:0b:76:16:3d:e7:c0:58:09:28:c0:04:01:1b:
c3:f4:a7:28:05:e6:eb:cd:6e:cf:ea:03:99:fa:04:
50:66:3d:90:bd:f9:d4:99:b6:fa:2f:3c:d2:a1:47:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:9B:49:54:66:AC:93:B7:95:8F:E6:76:60:82:0A:74:F8:CD:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/d08aa6cc-8a95-3103-a3f7-7471c8794eab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl
X509v3 Authority Key Identifier:
keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:65:20:19:18:f1:31:56:53:f0:e2:dd:b6:87:5a:14:8e:aa:
ff:8b:1c:e2:bc:95:92:e8:09:59:17:8d:1c:08:5c:bd:d9:79:
f3:fa:2a:3d:a6:25:16:ce:9e:59:10:ad:05:e6:81:b6:16:b9:
02:53:02:69:66:b3:83:7b:e0:fa:70:43:24:ee:95:6d:95:23:
d9:98:19:09:24:91:c5:1b:9a:92:47:02:e5:41:d4:09:db:1e:
ed:33:62:60:38:9a:b0:c9:79:8a:6b:5f:0e:e9:9b:ee:5e:18:
f1:da:3c:ba:29:4a:0f:55:31:25:26:9e:f1:23:50:b1:27:76:
7b:51:cd:80:b6:58:8a:4b:97:26:9f:b6:21:84:5a:6a:03:de:
01:49:84:c9:d7:61:fc:ff:86:5c:58:44:c6:55:22:4e:57:e8:
2a:49:e9:ef:f7:64:59:1d:66:e5:2e:28:e1:61:33:52:8e:4b:
fe:47:ea:5d:ac:a6:d6:15:a8:c2:67:e4:a9:5d:c2:c5:09:95:
7e:30:72:80:a3:0d:0d:7c:bc:41:27:ae:bc:9e:ac:4e:ff:c6:
59:fe:97:42:e2:3f:24:ad:be:65:cf:e4:a3:cd:d0:3d:a5:79:
d3:b8:50:25:f4:86:bb:6b:96:63:26:91:72:b7:9f:b5:4c:9e:
3a:43:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:50 2025 by rpki-client on console.sobornost.net