Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa
File: 86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa (raw, json)
Hash identifier: cMiNwnFUBvqFprfOaCDXgTrygWhxdFeKvgb1BL3mQIo=
Subject key identifier: A7:5E:AF:94:86:01:67:B8:CA:CB:08:33:67:EF:97:13:88:EA:E2:23
Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Certificate serial: 010D0C9F4328584953C40731ECBD0D28E9EAEAE0
Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 23241
IP address blocks: 170.89.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:07:31:ec:bd:0d:28:e9:ea:ea:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=87f07463-2131-4b5b-b6ad-45b8ee00be4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d6:f8:ef:b6:7e:d6:36:26:72:31:93:1c:aa:
ce:42:de:52:02:b3:95:c1:ce:91:66:36:60:29:4e:
34:4c:d6:ac:fb:63:99:a1:a0:80:26:17:5d:86:3d:
81:aa:1c:0b:7b:17:f6:04:2d:ef:94:a0:91:c4:8f:
51:46:00:6d:1b:3c:b8:17:c9:65:21:88:c6:b9:1a:
21:d9:a5:6e:c8:77:11:48:05:12:de:9c:f1:b8:b8:
fd:89:e2:5b:63:f0:23:4d:0b:ae:ed:e4:96:c8:a1:
ab:71:a9:a6:8d:61:23:a3:c8:42:0d:69:6e:5f:c7:
32:a6:33:df:f3:6a:8a:fa:64:de:c7:5b:7a:3f:5a:
d5:4e:b7:73:c1:22:4e:c1:96:78:f2:ba:bf:eb:0a:
59:1a:6c:cc:70:11:a2:b1:db:02:f5:a9:21:47:96:
d4:c5:d2:8c:0c:cc:ff:a2:d6:9d:09:28:bc:b6:cf:
95:6f:03:cc:e5:3b:e9:c4:ac:e1:6a:1e:1b:03:13:
d4:8e:f7:2a:9f:b4:26:36:01:6f:8b:40:46:19:56:
e2:48:f5:28:c9:bb:76:3d:ab:66:35:2e:15:fe:82:
ee:a1:c7:7c:e9:50:6d:91:28:21:db:64:67:46:5f:
9e:aa:b9:59:75:ce:e9:62:a2:0b:cd:ee:d4:f0:88:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5E:AF:94:86:01:67:B8:CA:CB:08:33:67:EF:97:13:88:EA:E2:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl
X509v3 Authority Key Identifier:
keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:99:72:9e:c4:7d:f3:38:f8:cb:56:5c:1a:c1:4b:34:79:53:
dc:f7:4c:fb:47:57:e3:9e:1a:0d:4f:fe:20:d5:21:be:d5:51:
38:b6:2c:25:9c:a4:44:80:69:80:85:0c:11:b5:00:19:06:2f:
42:e3:57:c8:e5:90:f0:bc:9c:ba:3f:a8:25:67:51:a3:af:59:
d2:8e:a4:53:de:89:25:ee:fc:fa:b6:75:03:b3:2c:61:01:46:
55:82:d6:62:7c:c5:bb:9d:27:2c:ba:e3:19:f4:6b:df:21:72:
46:b1:90:22:03:32:6f:26:7d:b6:f4:9b:b7:5b:6c:74:37:aa:
d2:a8:82:79:75:b3:a0:07:ca:c8:f5:4b:1e:e2:1d:0e:1a:f6:
f6:87:33:d3:26:05:fa:f3:fa:3a:17:98:63:da:5d:56:15:d3:
dd:66:0d:5f:75:6b:ed:88:80:4d:21:e2:96:74:c3:47:5d:cd:
50:91:29:1b:97:d4:c2:c5:8f:91:25:82:27:ab:93:d0:c3:5a:
9b:1d:08:93:e3:a1:f0:01:35:4b:c7:e5:a8:98:40:48:14:f5:
16:2c:c7:d4:e8:c6:52:7b:5c:58:00:bb:fc:05:fa:bd:fe:a0:
6d:22:19:c3:a2:7a:bc:11:c7:0b:74:c4:9b:f5:a1:ee:d7:8b:
aa:b9:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:34 2025 by rpki-client on console.sobornost.net