Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa
File: 94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa (raw, json)
Hash identifier: 2JtTru4Hypu68qMm9oyPRoJMwqLjcvWTw2zMz1Z7W80=
Subject key identifier: 9C:E1:D9:87:B8:3C:B6:FC:E6:78:62:F2:86:EA:24:80:7C:ED:E6:3E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF617226DB8543AA17D88D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 63949
IP address blocks: 172.235.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:72:26:db:85:43:aa:17:d8:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=c81cf7b0-6f2f-4a72-b855-1e13751a04c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:a2:ac:69:78:da:82:94:fe:70:9f:6e:4a:
97:d0:65:66:8c:b1:cc:dd:2f:61:ed:77:93:21:f5:
2d:c5:c9:7e:20:91:ee:39:1b:5c:77:cb:3a:76:cf:
ab:1f:f3:e6:f6:98:96:21:77:a6:f9:a2:e0:90:ed:
cd:b1:81:ef:c0:46:02:f6:d3:bf:c4:08:b8:95:98:
a7:a2:82:25:fb:22:ee:1b:d5:91:c0:31:4f:12:87:
fd:b9:49:48:17:3f:90:59:a6:07:5d:dd:99:3b:27:
d9:85:01:31:b8:13:54:86:f3:1a:35:f9:e2:ab:32:
94:af:4b:06:ea:a6:0b:27:13:a4:38:fb:a2:46:90:
a6:d2:fd:e0:df:d3:da:70:11:a1:d4:2f:9d:f3:19:
fe:9f:41:98:e3:fe:41:e8:06:92:f3:33:72:3d:9c:
fd:5c:61:93:91:cd:b4:77:2f:f0:eb:cd:98:55:8f:
0a:26:50:cd:32:82:8d:04:2e:d0:e3:31:21:66:dd:
74:ff:be:e6:2b:16:9d:ce:c8:85:0f:f4:d3:c6:cb:
32:e6:f8:fc:9b:f6:4a:da:36:c9:bc:10:ee:d6:78:
28:d0:0a:33:a1:ff:a7:bb:ce:82:04:31:50:4a:ff:
e2:dd:62:53:45:59:60:ac:03:e5:e8:3b:3e:72:3b:
17:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E1:D9:87:B8:3C:B6:FC:E6:78:62:F2:86:EA:24:80:7C:ED:E6:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:b1:13:20:bb:fa:77:38:f8:56:1c:c7:cd:3b:58:22:08:28:
1d:b6:4b:5c:bb:b3:83:19:ae:c6:9e:67:87:e4:b2:40:de:51:
bc:59:a9:5d:67:10:c4:d2:65:c4:d9:30:5e:7b:ff:27:70:ab:
30:37:74:db:3a:13:1e:9c:f0:8a:1d:2e:b4:12:09:26:1e:82:
8e:f2:17:4a:c3:a3:d7:53:03:03:37:6b:66:6d:1f:e8:c7:17:
ff:be:9e:71:b8:6b:e7:1a:6e:d5:c3:d5:2b:25:85:ce:b1:ce:
f8:de:4d:54:68:a6:b9:f9:14:ec:59:11:ba:96:15:f6:bf:52:
cf:06:59:32:fe:28:7f:9b:c3:65:29:3e:a8:d6:9b:db:51:d2:
91:fd:ec:c6:71:14:31:3d:63:47:68:66:4b:d4:d5:60:9d:3b:
eb:d4:96:10:8c:55:78:6f:93:eb:14:3d:f6:55:b4:28:e2:4b:
9d:24:40:5a:c0:33:65:48:b6:4f:b3:44:9c:a7:27:19:75:4a:
96:e7:2d:a4:e3:62:7c:2b:2f:38:5d:a0:8c:5b:be:66:45:ef:
06:be:74:6d:37:8a:6c:22:ae:ce:25:0e:76:62:e8:6b:e0:18:
9b:bc:24:6c:9a:b2:98:92:14:df:a6:6d:df:b7:01:27:d6:ef:
bd:ab:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:28 2025 by rpki-client on console.sobornost.net