Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eb04ed9-c0dd-3e87-b209-48a1f01cf7c5.roa
File: 7eb04ed9-c0dd-3e87-b209-48a1f01cf7c5.roa (raw, json)
Hash identifier: dy118Jgdr6+sZY74zY7Vew4HtQIqizSuAY/itBArJEk=
Subject key identifier: 41:95:71:0F:E7:81:25:26:4E:13:2F:7F:E1:4A:BE:47:5F:4E:C8:59
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858497DA46AC07E8804364CEF7900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eb04ed9-c0dd-3e87-b209-48a1f01cf7c5.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 63949
IP address blocks: 172.105.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a4:6a:c0:7e:88:04:36:4c:ef:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=af1ca32b-354a-47bd-9697-ff4500f5ee70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:c0:a2:69:b0:8d:b1:f5:7f:da:d2:6c:57:
29:78:ab:fc:c1:d2:86:fa:cb:da:45:d0:bc:e4:fd:
e9:72:f7:07:20:bf:7c:bb:09:ef:9f:69:ab:6b:f1:
87:ee:10:47:43:5f:05:f8:49:c6:f0:d2:29:15:45:
89:b8:47:39:ca:20:b2:90:93:27:ca:d4:9d:4e:5e:
67:d1:d2:6c:01:d4:c1:8f:ec:a5:60:61:ad:54:32:
ca:47:0d:6d:a4:91:39:ac:e3:95:96:4c:c8:d4:87:
18:68:ca:12:2c:78:fa:5f:fe:58:c6:37:06:1e:bc:
46:0d:ee:89:37:d6:0f:ec:26:e3:ca:9e:4a:68:ff:
22:bf:4c:0a:b8:fe:d1:e2:d6:02:d6:f6:ea:00:8f:
a5:7a:d7:98:ad:9a:f0:d6:cf:dd:36:b9:d0:32:32:
7e:ea:7c:b9:6b:62:2e:49:84:47:f4:7a:03:5c:c6:
4f:de:90:fe:7d:1b:f1:cf:9b:07:a4:da:f9:b9:5d:
97:7d:90:c1:a8:61:a4:64:36:9a:1c:a3:6a:53:07:
f4:1a:ce:c1:58:b1:5c:7b:db:9a:79:3d:a4:67:7e:
20:5f:89:93:d9:30:56:c0:5d:0e:2d:6e:44:5f:a1:
ca:13:8f:2c:6a:92:f9:81:5b:a7:fb:13:22:2a:cc:
ff:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:95:71:0F:E7:81:25:26:4E:13:2F:7F:E1:4A:BE:47:5F:4E:C8:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eb04ed9-c0dd-3e87-b209-48a1f01cf7c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.105.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:75:21:7d:cc:a4:24:a6:3f:69:c0:cc:bd:25:27:30:d5:12:
34:bc:66:82:63:06:96:9a:4d:2b:cf:da:73:a3:fa:8b:cb:c8:
5b:dd:f5:1c:01:55:37:bf:dd:af:1c:ee:24:79:bb:86:10:b1:
da:ff:d2:52:33:0e:ad:f3:fd:a3:72:34:1e:2b:ff:62:d7:6b:
89:f6:d7:c7:3c:b2:78:98:d1:61:77:2b:d6:50:40:0b:94:5a:
df:8a:7b:d4:6c:33:4b:36:29:6e:20:20:72:a9:83:2e:6f:7c:
5c:70:8d:44:4d:bc:9f:1a:04:c2:44:33:8c:20:8b:97:b7:47:
62:b6:30:f4:eb:ad:3e:85:37:90:22:be:d6:17:ea:d1:a6:55:
88:21:65:ce:5c:84:28:2b:fa:33:46:d0:d7:34:b6:2f:3b:d4:
6e:b5:94:dd:9e:c1:e2:14:c3:82:f1:03:a9:81:3d:a2:64:a5:
16:48:53:33:e6:bf:7a:3d:45:a5:7d:96:c6:69:b3:e3:45:22:
98:f8:a3:ec:39:79:96:e3:f4:57:47:f3:0e:01:2e:3e:3d:64:
cf:6d:a8:97:47:5c:4f:5f:91:be:24:01:29:44:58:14:3c:30:
c1:36:57:1e:a2:6e:a6:e1:71:1b:c1:06:79:2c:10:16:54:53:
4f:bd:68:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:11 2025 by rpki-client on console.sobornost.net