Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e3d12f-b4e5-3217-8e55-eaf5f1064d8a.roa
File: 93e3d12f-b4e5-3217-8e55-eaf5f1064d8a.roa (raw, json)
Hash identifier: NRNGj+IxU4DIt18YQuJLRmPJ8p96fzvt0/tCxvLd16Y=
Subject key identifier: EA:E2:CD:5D:BA:08:B2:6C:D9:5C:07:5B:BE:72:91:A6:2C:8C:AA:FF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243E904F256797A3D4DACC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e3d12f-b4e5-3217-8e55-eaf5f1064d8a.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.71.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:e9:04:f2:56:79:7a:3d:4d:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=5d1a39d9-2336-49ca-952e-86603787bfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:aa:c9:12:75:18:b6:81:16:dc:d3:87:64:
50:01:91:7c:b8:e6:f0:5a:19:e2:48:6f:c8:09:3c:
e5:fc:bb:6f:2b:89:bf:7f:6f:b5:c0:1c:c1:00:06:
7d:36:cd:00:55:bd:bc:b4:ed:bc:19:2e:6f:0a:f5:
f0:b0:66:4d:0e:19:66:85:1b:bf:9a:a2:ec:ac:41:
88:fc:95:24:b8:c1:28:d9:51:87:ec:d6:4b:2b:b0:
fb:7f:bf:4b:b4:5f:0a:0f:0e:8f:7c:be:cc:30:31:
52:26:9c:80:05:b7:d5:07:d7:06:25:0c:67:15:17:
d1:64:a8:d6:19:85:2a:5c:95:f2:5b:51:df:0a:e2:
cf:89:9a:2f:4b:55:ca:2c:a8:c6:e1:72:a2:95:ac:
a3:75:5f:f2:84:c9:33:1f:54:0a:17:43:f1:24:7d:
6c:6f:bd:36:36:5c:be:8a:f9:cf:06:f0:b2:3c:3e:
cd:f1:d4:04:8d:02:69:ee:e0:af:90:4c:09:81:94:
fb:34:a5:ea:c5:eb:f1:c8:96:73:73:14:54:35:72:
6c:27:59:24:74:60:6d:ee:e9:cb:e9:fa:ca:d9:ed:
57:d9:6a:66:16:81:ee:f7:5b:ad:4a:4e:cd:54:6d:
c2:24:a9:94:6f:f3:d0:9c:77:2a:d8:27:2f:32:2b:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:CD:5D:BA:08:B2:6C:D9:5C:07:5B:BE:72:91:A6:2C:8C:AA:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e3d12f-b4e5-3217-8e55-eaf5f1064d8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.71.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:93:27:e8:15:e0:ca:7c:5f:ef:7f:98:09:73:43:44:bc:f2:
4b:78:ec:79:3c:ac:a3:8c:9a:9e:51:4a:99:f1:dd:c9:19:f6:
1f:73:2b:86:d5:6f:5d:e4:22:48:23:79:ca:30:58:ea:84:44:
d9:40:cd:ad:c6:67:bf:39:ea:fd:9e:7d:a3:2a:8a:9b:d4:1b:
aa:9d:69:f7:05:28:93:b6:96:a4:bd:ac:fa:00:bd:66:0f:65:
fc:7b:fd:c8:01:a8:3c:31:34:0f:e6:0f:1a:a9:27:29:2f:37:
b7:91:d7:6b:d7:79:49:6e:5c:0c:d5:00:ed:1c:17:79:46:e5:
55:fe:ec:54:06:2f:f0:d9:66:34:38:c2:1f:f2:02:76:e5:c2:
f6:06:b3:d0:7e:f3:e9:fb:59:3a:70:dc:16:df:58:72:23:5e:
8b:b2:b3:02:53:8d:d0:d8:c6:b3:7e:14:e0:c8:b6:43:b1:32:
a1:a6:b1:f8:48:ee:4f:03:f8:a3:f8:8b:09:f9:1c:15:32:5d:
9a:6b:f8:71:4c:34:85:71:0a:09:3e:21:7b:7f:65:09:b4:c3:
59:62:fd:44:59:04:e2:de:2e:2c:04:ea:c1:01:68:0d:19:74:
33:bb:1d:2f:5c:5c:9a:51:ac:33:3d:28:e2:35:57:12:6a:1f:
79:2e:37:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:28 2025 by rpki-client on console.sobornost.net