Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa
File: d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa (raw, json)
Hash identifier: kYX5lhELLG7ma2YkDX1C8fGIkYRmvbecBc3ZUKdWeVs=
Subject key identifier: 91:30:CD:89:3A:BB:83:F1:3E:8F:DF:2D:CD:B2:30:D0:C0:A4:10:7C
Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Certificate serial: 010D0C9F432858495C24465BDE9B23B8C6A1B8A0
Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 14511
IP address blocks: 66.231.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:46:5b:de:9b:23:b8:c6:a1:b8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=74cf8a39-d370-4f19-b6bc-d620a082b7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:c7:b1:e3:25:60:69:5f:16:41:74:e5:30:
44:2f:7e:eb:38:b4:a7:58:52:6c:da:be:c5:54:d5:
ce:fc:c6:9d:9b:3c:1d:3d:6b:02:9e:3d:f0:8b:be:
99:68:a4:92:8c:fa:95:a9:41:da:5a:29:98:15:74:
3c:76:a5:1b:3d:59:be:4b:c3:e8:23:33:f6:f0:24:
eb:58:15:be:ac:12:26:e3:be:3d:99:d5:cf:40:a4:
75:b1:62:b7:32:a0:98:25:b4:b4:cf:18:f2:e5:4c:
26:8e:17:36:79:09:27:71:a9:9b:9d:81:ef:f4:a3:
cd:4c:86:57:e5:2f:57:df:c0:ca:28:c3:de:3c:bf:
c7:5b:51:29:7f:7f:ec:97:b3:08:4a:c3:c9:c7:95:
2e:45:2e:10:36:fb:eb:97:91:87:7a:33:bc:91:5f:
91:65:8a:7e:5b:8f:3e:95:0b:58:1d:69:72:ef:f3:
35:2f:54:5e:eb:4f:ab:02:9a:0c:5b:28:80:8a:b9:
f0:7b:ee:3a:d8:73:ca:5c:99:fe:a2:58:c4:87:4f:
0b:59:e6:47:b0:b2:f2:53:79:28:3d:1f:5c:27:cc:
ce:89:fe:33:8a:45:1b:47:3c:cb:06:54:3e:2f:2f:
af:a1:8e:57:b2:4f:9a:4d:b9:3b:b8:18:94:9f:b0:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:30:CD:89:3A:BB:83:F1:3E:8F:DF:2D:CD:B2:30:D0:C0:A4:10:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl
X509v3 Authority Key Identifier:
keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:ef:87:97:20:e3:4d:23:9f:1f:d8:47:95:1a:02:b8:df:c9:
55:7d:54:33:b2:60:ea:50:fe:86:0c:c6:56:4a:e1:fe:13:ba:
1e:a3:df:04:1d:cf:ff:83:fd:1f:b8:55:4d:71:e2:9a:2e:65:
4f:d5:a0:c9:c8:3c:06:df:91:ba:e1:42:a9:97:62:9b:4b:dc:
c3:1f:06:c4:ac:45:66:01:96:76:79:47:38:ff:cb:59:2b:fd:
2e:27:22:ed:9f:b3:dd:9d:01:dc:e2:50:9e:08:51:44:71:e5:
ca:74:aa:72:63:aa:d9:63:54:e9:fc:bb:36:ab:27:25:95:7c:
b9:84:63:46:65:4a:18:cd:8e:a4:b1:d9:60:6f:e4:5f:3b:b5:
be:cf:46:f5:13:93:c9:5e:0b:54:6f:55:50:a8:06:40:ce:5e:
9e:29:68:2a:e7:23:07:e2:a5:9f:a3:7a:28:d6:72:92:4e:80:
fd:94:43:eb:a9:98:02:f9:22:f8:39:7d:26:c0:56:46:35:97:
ef:c5:07:d7:17:90:d0:88:2b:4b:86:f6:0a:88:9d:c2:a5:02:
5e:ea:af:b6:01:a7:4a:0a:6b:a2:8b:4d:c4:ee:62:8b:7a:d7:
44:86:e1:65:38:dd:42:5d:c4:c9:7a:42:99:44:10:7d:8d:e3:
25:05:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:35 2025 by rpki-client on console.sobornost.net