Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa
File: 5d9bac24-42c5-32f4-89cc-d256e7767bce.roa (raw, json)
Hash identifier: y6cFydm4OhBm7gEDykT3KS2+GpcP6mZrZcIOtPrQfu4=
Subject key identifier: 2A:14:D4:F1:FD:61:72:16:0A:C7:D4:59:CF:EC:0E:D1:BA:1E:95:56
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F432858496CE45A7DEC70FEC94D8C9000
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 834
IP address blocks: 67.43.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:5a:7d:ec:70:fe:c9:4d:8c:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=fe46a083-5d04-4834-856c-df1b8792df13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:35:40:08:82:91:d6:14:64:39:9a:ea:40:af:
be:c3:5f:3d:3c:dd:bd:fb:d5:4b:3d:be:ec:49:a2:
cd:34:69:1d:5f:bc:cb:f7:dc:83:0e:9c:1f:da:8d:
85:61:ac:40:17:49:18:93:1c:fb:66:2b:8d:76:f4:
58:77:28:66:8e:88:83:ed:31:c0:8c:e0:5e:86:89:
94:88:a9:cb:3c:a1:fa:4e:22:22:4c:1d:8b:03:16:
a3:fd:51:b9:25:9e:41:31:76:a0:98:9a:14:88:47:
40:fa:0a:5f:6b:0e:5c:64:b1:dd:0d:35:9d:28:0b:
dd:50:43:0a:1c:18:bd:8e:fc:1c:a8:e1:62:b1:1b:
63:89:d6:a3:28:64:92:a4:56:5b:ab:ed:f5:e6:13:
11:75:42:8e:50:1d:7b:6c:0a:33:26:1d:56:05:1f:
15:71:38:1c:ea:58:65:1b:84:73:0b:47:a8:0e:c4:
6b:78:f8:fe:64:9f:08:a5:58:9a:60:bf:d3:1b:1d:
7f:71:52:a1:91:ac:d8:67:4e:aa:d7:b1:40:38:15:
d2:e8:6b:f9:47:f1:9c:fa:14:dd:70:5c:55:08:12:
fb:2d:15:4a:9d:6c:78:06:e8:1b:10:26:f3:79:80:
04:65:2b:87:92:4f:57:16:48:7a:23:fe:de:42:ba:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:14:D4:F1:FD:61:72:16:0A:C7:D4:59:CF:EC:0E:D1:BA:1E:95:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
67.43.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:07:46:55:2e:86:ed:43:da:03:15:af:5c:6d:35:f4:18:28:
e1:a1:1d:d2:01:8f:8d:a7:d3:49:60:28:ef:6e:12:77:61:40:
02:9b:c6:3f:85:ae:33:58:60:ca:96:a9:91:74:ad:1b:2d:67:
28:53:6c:be:66:15:ce:f4:5c:32:e7:67:71:f3:07:27:14:5c:
7e:9c:b7:26:e8:c3:b9:73:4b:9a:b8:6b:ba:95:f7:03:d7:54:
b0:7a:e5:06:7f:d4:15:ff:c4:55:22:a6:07:0d:e2:25:e5:74:
a5:3e:e9:df:a6:ac:3d:2f:1e:30:7c:e2:93:bf:d8:ec:5c:f9:
a9:f4:fc:2a:33:c4:5f:29:79:92:94:3b:a3:ee:d2:30:ec:bc:
f7:a1:e4:65:a3:9e:9b:4d:fd:c7:e3:5a:7d:b8:ff:d8:c3:48:
8f:50:c2:2d:e2:fa:06:85:d9:2f:6c:33:e5:e1:cf:e0:c1:71:
5d:7b:2d:b5:54:4c:c3:09:97:62:5f:a8:d9:09:a3:6d:e7:79:
86:e5:71:ff:f0:09:34:40:84:43:a6:ec:c9:6a:a8:b8:8c:af:
2b:2c:b9:0a:f7:f1:bd:ce:6a:55:aa:14:0e:40:cb:6e:f5:c9:
32:88:10:17:d4:90:49:f6:9b:c9:ff:df:51:bb:2b:32:21:27:
9d:75:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:04 2025 by rpki-client on console.sobornost.net