Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ce4d8bf-df83-3fb5-8092-c0603d4d6510.roa
File: 4ce4d8bf-df83-3fb5-8092-c0603d4d6510.roa (raw, json)
Hash identifier: LkXn6Pdn7cfxKxojql7SSK3b1N3S9eGnbePKYlrg5j8=
Subject key identifier: 33:89:3A:7F:2C:AD:E7:DF:FA:17:11:EB:0B:99:7D:68:D0:AA:55:6F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C575FD729AA929C1F9EF5200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ce4d8bf-df83-3fb5-8092-c0603d4d6510.roa
Signing time: Tue 04 Feb 2025 13:38:52 +0000
ROA not before: Tue 04 Feb 2025 13:38:52 +0000
ROA not after: Mon 05 May 2025 12:38:52 +0000
asID: 30036
IP address blocks: 173.22.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:75:fd:72:9a:a9:29:c1:f9:ef:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:38:52 2025 GMT
Not After : May 5 12:38:52 2025 GMT
Subject: CN=a8d1d9a7-ca8a-4f23-943c-e9f1162d9e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:9b:0c:ab:a4:74:7e:4b:d9:7a:4b:9f:c5:
f7:e3:33:21:a2:e3:fe:01:7e:46:60:33:8e:64:b8:
db:ab:e8:7a:79:56:f4:a0:94:bb:ce:47:ec:5b:54:
ab:97:10:47:34:b4:35:c5:3b:4f:02:33:58:ea:a6:
47:61:1a:1b:c5:a8:8a:3a:25:53:b3:fd:c1:ca:46:
9b:f0:0f:6d:a4:7c:04:d0:fd:f5:24:1f:ab:76:44:
9a:28:f9:b7:31:26:ec:b6:86:57:16:9b:9f:bd:14:
f1:c0:92:a7:dc:16:f7:b5:e4:af:10:04:1a:e9:06:
e0:25:bc:c8:e4:8a:bb:e1:d1:0c:a1:76:1b:28:64:
66:5d:eb:fb:5c:2a:ab:7d:5e:ac:43:7c:5f:bd:45:
de:b8:d8:21:ec:38:5f:11:3a:26:dd:2c:96:f3:f2:
ab:a9:87:b0:3e:a0:6a:0c:f2:1b:e3:00:d0:39:ab:
4d:b5:20:8c:43:35:43:80:bc:ba:f5:f3:de:aa:ad:
4f:f1:7d:53:b3:9e:26:40:2a:be:17:8c:ab:ad:ef:
6b:ea:30:08:ac:70:77:79:3a:ec:7c:0e:82:09:43:
0b:52:27:67:e6:24:dd:68:57:02:69:cd:56:ce:e5:
ab:57:fa:3a:61:d9:55:e5:a9:28:e4:49:13:e6:a3:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:89:3A:7F:2C:AD:E7:DF:FA:17:11:EB:0B:99:7D:68:D0:AA:55:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ce4d8bf-df83-3fb5-8092-c0603d4d6510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:3c:52:00:83:0a:b4:52:5a:d1:f2:a7:aa:7c:a8:c0:b1:53:
8e:65:24:04:3f:ef:9d:52:16:17:b7:d1:70:21:7b:8e:52:88:
25:33:8b:51:08:e2:a2:b8:db:95:2f:65:28:75:4b:55:47:e6:
3f:e6:f7:b3:f3:4a:6b:09:e6:13:bf:18:1a:ea:4f:cf:e2:bb:
00:5d:3e:6c:0e:54:b0:75:6e:68:81:4f:a9:fc:76:54:3f:59:
04:21:9e:4f:54:91:8d:55:92:02:d8:67:2e:41:85:86:ba:d0:
62:78:6a:96:7f:24:06:bd:0f:07:82:6d:99:3a:48:10:0c:e0:
f4:d6:b4:a6:09:1b:6a:fc:f7:ca:3b:92:d0:04:27:1e:2c:24:
98:30:c5:5b:01:a4:30:7d:de:ee:4f:01:22:62:f3:ab:c1:fc:
01:dd:d2:53:6f:69:fc:8c:59:87:0a:f4:8d:99:de:27:d2:70:
ef:db:36:6d:3a:ea:ae:24:79:2a:6c:ea:95:69:8e:c9:2b:43:
0d:a0:8f:62:a0:9f:a2:50:be:06:79:d8:cd:3c:35:91:33:53:
45:d7:4e:39:7a:b5:8d:04:60:f2:55:23:0e:5b:3e:f6:91:a0:
fd:f9:68:61:97:d2:91:e8:5c:75:30:6b:d8:36:b8:30:84:f9:
b3:1c:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:15 2025 by rpki-client on console.sobornost.net