Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dd379f3-b180-3cf5-8048-0112872bee50.roa
File: 8dd379f3-b180-3cf5-8048-0112872bee50.roa (raw, json)
Hash identifier: dTS5jtEbfIlOMKTSCwSVFatN/5MksKtNkGZyAwWvU+g=
Subject key identifier: 9C:02:9F:40:15:DB:1C:DF:58:2F:27:CE:FB:DF:E8:43:1B:65:56:9D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858496A19AF3179EA4EB0308EB2E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dd379f3-b180-3cf5-8048-0112872bee50.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 63949
IP address blocks: 172.234.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:af:31:79:ea:4e:b0:30:8e:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=20f90b91-9173-4c76-b4b0-410d0b7a3278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:db:4f:c8:e1:2c:a5:60:a2:1d:b1:81:d4:
2d:10:a0:a9:e6:a3:f8:07:86:1e:94:ec:81:f5:ac:
01:12:85:70:b6:7c:24:06:58:66:33:2e:82:0b:31:
39:3d:20:41:d8:78:a0:9c:cf:fc:5b:76:66:7d:b3:
20:c1:cd:4f:6b:09:f8:ba:4d:f3:cd:f2:47:2b:72:
a4:17:84:d5:27:17:be:71:6b:85:05:e2:9b:34:b8:
cc:e6:48:5f:44:24:a9:9d:c0:56:59:11:a5:ac:de:
fb:3e:04:69:2b:ad:9e:70:da:b7:e1:28:7b:6e:63:
86:50:68:4f:d2:fb:6f:7b:3c:0d:71:ba:18:65:bb:
77:3a:45:eb:24:9b:97:a6:4c:1a:7a:a7:58:93:bd:
5f:de:b1:6d:a2:58:e7:32:25:78:97:97:35:c6:06:
ce:3b:74:4f:82:e2:ad:8f:2a:21:40:b5:6b:af:bf:
ca:c2:51:af:1b:98:26:cf:94:6f:7b:00:fd:18:41:
cc:e8:79:f4:da:00:00:e9:fe:18:9e:8b:d2:f0:9f:
fb:d8:a9:16:3a:d4:44:77:27:0f:ca:f2:e9:1c:cf:
6c:64:ed:98:75:5c:ef:b7:e1:ef:18:97:8a:e2:37:
8c:e1:25:3c:fc:19:b4:1f:9f:af:b1:2c:79:48:83:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:9F:40:15:DB:1C:DF:58:2F:27:CE:FB:DF:E8:43:1B:65:56:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dd379f3-b180-3cf5-8048-0112872bee50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.234.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:39:b4:56:be:ea:01:10:1d:98:b4:22:d9:a5:4a:e4:10:2c:
f9:e6:dd:28:56:32:f4:f9:4f:74:d7:f5:24:b3:8b:ba:46:3b:
d5:fe:1d:1e:bd:db:1f:fc:e7:1f:9a:a5:d7:c1:79:81:a8:33:
9e:88:63:96:c0:f3:82:af:19:37:1c:b9:7a:e2:52:a3:06:a3:
48:7e:fd:38:58:fa:c8:a5:d4:83:ba:b0:40:13:be:ec:99:e2:
65:76:77:d9:07:df:14:41:b0:c5:78:29:f9:10:77:96:4e:7a:
fc:95:43:ac:79:5a:1f:ac:28:f3:b1:dc:30:86:19:22:10:9e:
ba:ca:8c:4c:42:07:4b:b3:79:2f:73:e5:16:b9:52:b9:4d:5d:
54:f2:27:27:ae:83:f8:fb:15:f0:b9:d9:66:66:d5:cd:0b:9c:
15:8f:f8:cf:10:6d:d1:da:43:c1:fd:aa:a0:0f:05:06:a0:2f:
92:bc:d2:bf:2e:10:0f:1a:5d:ed:00:98:7f:8e:2f:d9:39:28:
5b:4e:7c:26:6d:73:2a:e8:49:42:0f:5f:9d:cb:dd:6c:85:74:
47:a2:23:f9:5d:7e:20:36:c6:fe:36:bc:d0:0f:90:a5:94:62:
74:a7:46:d3:ab:ba:df:98:b3:82:79:08:e7:f2:0e:0e:22:55:
1e:a8:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:26 2025 by rpki-client on console.sobornost.net