Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa
File: 643bc75f-3310-37b8-a7ac-664e69139fad.roa (raw, json)
Hash identifier: vSRhVA1yi2PKlCQMyQuw9UrQ7tObvEDKPKLuJn8qFVs=
Subject key identifier: 5A:07:A6:60:33:5F:E6:F6:13:99:8C:CF:5F:B6:83:C1:C4:3F:2E:0B
Certificate issuer: /CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
Certificate serial: 010D0C9F43285848037A4A4A7675CAE2191E9B80
Authority key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 195.85.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:4a:4a:76:75:ca:e2:19:1e:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=a29303da-2273-41b0-85c8-bb858b8b31a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:d8:f0:fb:b1:0d:88:53:cf:dc:86:a5:5f:
22:6f:37:a6:7a:6b:0f:6e:cc:37:93:93:d4:f3:14:
d4:a2:18:0c:7a:e1:33:02:d9:0d:5c:cb:1b:8e:93:
2f:29:50:df:ce:09:c1:64:4a:af:ef:41:78:74:f0:
63:35:00:c8:ff:76:2f:4a:7f:d7:cd:c4:9d:9e:27:
06:cf:f9:ba:71:2e:63:8f:7b:08:5a:15:3e:a6:2a:
af:09:9c:2d:78:91:b7:93:b7:7a:a8:0b:8c:73:8e:
55:94:c9:3c:97:a3:ba:30:21:67:4d:17:4f:52:63:
5b:3f:68:3e:e7:a3:37:59:c2:35:3c:0d:30:73:b5:
4d:07:0d:49:38:19:a5:fb:ec:14:d5:2c:0a:92:a8:
3f:21:e7:85:d2:83:23:7a:7e:32:77:49:04:4e:5b:
28:7b:b9:54:34:ca:90:66:c7:cf:58:82:23:3d:4d:
a3:ea:28:2f:95:df:f0:76:4d:ad:fa:89:77:89:bd:
14:f3:b8:04:c9:15:db:18:fa:86:5a:4a:6d:5a:f4:
06:68:70:c9:02:b3:ea:04:8d:41:ca:8b:16:15:82:
ce:6d:76:d7:47:ef:25:38:17:8a:ae:b2:9c:45:82:
3c:8e:58:de:ed:e5:ce:28:fa:ff:e8:32:a7:63:88:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:07:A6:60:33:5F:E6:F6:13:99:8C:CF:5F:B6:83:C1:C4:3F:2E:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl
X509v3 Authority Key Identifier:
keyid:9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
sbgp-ipAddrBlock: critical
IPv4:
195.85.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d6:4d:23:b9:f9:10:eb:ff:a3:eb:81:91:d4:17:34:fd:2d:ac:
a0:06:bb:bd:31:c1:54:e4:7f:b4:91:05:30:eb:73:e2:81:6e:
23:17:58:ad:16:dd:ac:68:5c:c2:ff:91:f6:0e:43:ce:a3:fb:
fd:ce:2a:1b:ea:14:f2:ef:cc:78:71:73:68:96:0d:d2:43:b7:
78:33:57:62:3f:2d:ca:0e:8d:45:db:78:dc:b1:7a:d1:f9:42:
40:45:69:c2:27:80:63:54:5a:e7:99:c6:76:a1:d9:3a:3f:04:
32:cd:5a:b2:9a:f2:4c:58:d7:cb:3a:a6:fc:14:1e:4c:b3:3f:
2c:4b:26:2c:bc:71:6d:cf:37:9a:18:9c:07:09:aa:75:da:27:
22:c0:4f:df:dd:a6:15:88:f8:5d:89:4c:77:69:a1:d6:24:ce:
ef:4b:f1:7e:fd:7d:ab:70:2f:17:0f:4c:f5:37:ee:c5:dc:f5:
57:03:c9:a3:54:41:c8:da:0d:3e:92:f1:85:c0:90:6f:b6:b0:
9c:a7:43:d4:97:bd:ef:1a:66:9c:84:6c:be:df:86:f4:52:7c:
82:b6:70:d6:e9:58:de:52:48:c4:d6:37:05:d5:15:68:5c:2a:
53:a2:a4:ab:d9:5b:b4:1a:76:26:c7:bc:f9:94:17:75:ba:20:
75:78:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:05 2025 by rpki-client