Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa
File: 1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa (raw, json)
Hash identifier: QeXq2MeeNRy4DbusKFX8ViOHURj04u+7CZxLrLYQyXw=
Subject key identifier: 1A:4D:F0:50:96:DB:C9:77:72:FC:D2:8E:AA:B2:FB:3E:EA:1E:2D:D8
Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Certificate serial: 010D0C9F43285849648445CE8B2EFCC1D07B8780
Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 14618
IP address blocks: 172.86.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:45:ce:8b:2e:fc:c1:d0:7b:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=0b7e0083-6b4b-47cf-aa8b-6c3c64e35102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e1:6f:7b:02:f6:5e:f2:a9:36:ba:73:a2:e9:
b4:44:c8:ac:87:a7:d0:17:48:d7:8b:64:b9:e2:75:
8e:3b:70:5e:77:20:1d:e7:ef:ac:d3:d6:65:66:a0:
ac:ad:43:cb:4b:29:64:b6:99:d8:58:09:45:7d:9b:
1a:14:23:07:c5:19:2a:3d:fd:00:71:17:3d:19:f7:
df:f4:92:5c:11:9c:e1:49:5a:cc:92:bf:25:c5:2c:
1e:29:66:87:74:53:51:0a:18:12:cb:f0:9b:8b:01:
d3:aa:0f:02:b6:cf:62:95:ce:4f:41:e1:17:94:36:
13:bf:f9:ba:84:af:66:ab:40:80:88:eb:40:26:30:
d7:1b:7b:1b:cd:27:50:b5:a3:2d:78:ae:af:9a:80:
93:f4:7c:0e:d4:cc:a1:d4:10:c1:9f:2d:0d:32:3f:
70:8b:56:e5:c6:c8:d4:12:91:95:f5:d2:81:13:3f:
ad:7d:a5:1b:71:6b:1f:70:8c:53:18:b6:07:36:b0:
9c:93:b1:c6:86:68:fa:b7:a1:fc:cf:c4:3f:ca:21:
4d:35:af:3a:19:49:4c:3b:01:fa:f9:49:ec:dd:11:
c2:a5:1b:86:6a:36:57:53:50:70:60:0a:fc:d7:5d:
96:76:f8:43:33:4c:02:f5:d8:bd:91:03:4b:81:52:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4D:F0:50:96:DB:C9:77:72:FC:D2:8E:AA:B2:FB:3E:EA:1E:2D:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl
X509v3 Authority Key Identifier:
keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
sbgp-ipAddrBlock: critical
IPv4:
172.86.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:d9:53:a1:8a:a1:43:e8:6d:e4:9f:69:5a:10:91:43:98:16:
d4:10:93:ec:bd:f4:fb:c0:94:36:fc:6e:3a:ee:fb:b2:1a:49:
b3:7c:46:72:8d:2f:2e:14:88:93:cc:2a:6b:e8:65:b1:52:a3:
e8:ac:ad:4d:47:0a:f3:1c:6d:2a:3b:02:4f:47:14:b6:a1:a6:
8d:13:9e:1c:7d:fa:be:6e:57:08:4a:43:d8:b7:2b:08:1d:7f:
11:2e:bd:94:6b:2d:41:55:fe:13:27:40:da:08:3f:c0:44:50:
0f:31:ca:cf:a4:1d:d7:b1:4a:2c:64:84:ff:f0:dd:be:e8:0d:
45:de:f3:b7:09:94:46:a6:24:17:f0:52:fe:19:1f:ae:a7:e8:
9c:17:41:5c:a7:74:86:b1:87:5e:ca:b1:13:75:56:a6:49:3b:
09:5a:0d:3a:9a:0d:9b:ea:3c:a3:d2:29:79:86:fd:8c:91:32:
74:a9:94:97:da:de:ed:30:f2:2e:dd:90:f7:af:97:fb:e7:5a:
cc:ee:c3:ba:af:5d:9c:89:16:f3:98:3e:ec:98:ca:37:37:cc:
14:98:3d:05:14:d4:26:21:dd:5e:2d:0f:4a:4c:6d:54:22:ae:
64:82:48:18:3a:c0:b5:75:69:b2:15:7f:67:d2:84:e5:1c:dc:
0d:67:2b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:38 2025 by rpki-client on console.sobornost.net