Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa
File: e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa (raw, json)
Hash identifier: WctTTEClN6qcEFn2C2pzCHHDBK8ZXMBujlhGrX03Kt0=
Subject key identifier: 3E:2C:E6:51:6D:DD:E4:6F:56:9F:6E:87:CA:C1:28:3C:58:F3:48:CF
Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial: 010D0C9F432858493ED3D916EEA39AF474B9F880
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 14618
IP address blocks: 69.89.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d9:16:ee:a3:9a:f4:74:b9:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=e40076ec-6df6-4fed-9e4c-84403b1db1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:ad:cb:75:92:03:5d:a8:61:06:bb:57:b9:
a8:48:e0:6a:39:09:47:a3:8d:bf:3d:24:0b:d3:1c:
e8:1f:3b:d2:df:cc:a5:42:64:75:08:6f:ab:8b:3d:
22:8f:00:5d:8a:4d:85:db:83:a2:7a:5b:55:c2:d7:
80:d4:d4:b2:53:e3:a1:ca:e2:aa:ea:43:98:57:40:
49:c3:9f:03:a3:d6:ec:84:28:ab:16:2a:80:de:1f:
7a:71:8a:09:9c:72:8f:a7:d0:b2:2a:89:92:79:d7:
68:04:fb:6e:f3:8e:34:71:73:c8:c3:94:2c:01:dd:
fe:bc:52:cf:1c:db:93:b2:70:67:5f:9d:50:ad:e8:
3b:90:1c:c9:01:1d:81:c8:77:ce:94:8e:5d:1f:fe:
0e:fc:1a:88:87:0a:0e:7d:78:b6:0f:0d:e3:7c:fe:
75:26:52:19:69:58:57:9b:ba:a8:68:cf:f5:7e:36:
c9:8f:ec:1b:bb:14:f3:de:39:09:51:e3:2a:59:48:
07:53:ec:24:52:f9:86:9b:f2:1e:b1:37:73:b5:b1:
b0:0c:ca:82:dc:d6:cc:f8:a9:7e:46:a0:82:17:45:
73:eb:10:94:83:38:0d:90:bd:2e:4c:53:0c:c0:d1:
92:0d:05:75:bf:fe:94:a7:68:3e:db:60:af:ca:58:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:E6:51:6D:DD:E4:6F:56:9F:6E:87:CA:C1:28:3C:58:F3:48:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
X509v3 Authority Key Identifier:
keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
sbgp-ipAddrBlock: critical
IPv4:
69.89.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:95:9e:19:9e:e4:9f:d7:3f:16:17:be:1f:fd:9d:c7:21:35:
de:6d:f3:a4:57:00:ca:60:94:5f:f4:aa:bb:2a:11:b7:8e:9e:
b2:6b:66:57:34:f5:5e:a2:aa:5b:e4:56:96:2f:d6:3f:b1:3c:
8f:23:4a:5d:18:f5:e1:62:36:3b:ca:3c:a5:b8:99:94:7a:af:
40:7d:d0:e1:81:c0:4a:74:8c:25:90:94:bc:f2:15:c6:6a:70:
28:2b:3f:28:85:68:ab:ac:9d:b4:c5:7a:cc:4b:55:06:7a:e8:
e0:f3:a6:c1:b9:a8:0c:8d:ba:4a:26:f3:0a:00:4c:bb:b3:ef:
ef:fe:92:cc:c9:76:ab:4f:32:72:02:e0:24:34:05:f5:39:2d:
fd:b8:f9:6f:8f:2f:30:34:70:54:a1:2c:4d:75:34:77:65:7e:
64:b1:c9:79:71:3c:7d:ba:a2:ed:0f:eb:8f:d2:39:c7:32:e9:
e8:86:8c:c8:df:67:33:4f:b6:1a:79:50:c4:05:33:83:d4:81:
43:1a:e5:0b:de:38:0c:fd:ea:74:de:a9:ba:f9:07:27:a6:3e:
61:b5:fa:fc:fd:ed:d4:3a:c0:cb:64:cd:ae:50:42:91:46:6a:
62:ca:6e:11:16:cd:fd:7f:95:b4:65:82:4e:04:9d:18:84:90:
1a:c1:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net