Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d1b386c-2435-3547-a5f0-a22c80e99478.roa
File: 8d1b386c-2435-3547-a5f0-a22c80e99478.roa (raw, json)
Hash identifier: 9JXahtAfGum27d1kUHRGAdgqCbX2syVqDZ4CfkYy0fQ=
Subject key identifier: AE:F0:D0:5D:AE:FD:E3:32:F3:C4:C5:C3:8F:52:79:11:CC:21:81:10
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C557DD33BD95C8F29093A980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d1b386c-2435-3547-a5f0-a22c80e99478.roa
Signing time: Tue 04 Feb 2025 12:38:10 +0000
ROA not before: Tue 04 Feb 2025 12:38:10 +0000
ROA not after: Mon 05 May 2025 11:38:10 +0000
asID: 30036
IP address blocks: 173.17.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:57:dd:33:bd:95:c8:f2:90:93:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:38:10 2025 GMT
Not After : May 5 11:38:10 2025 GMT
Subject: CN=f510d44d-11ef-4303-9980-48a76eafc7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:bd:f0:70:c7:f1:79:3e:2b:38:7b:b8:97:
7f:24:a4:25:3c:f0:6d:7b:e5:9c:58:07:9e:80:21:
ed:14:e2:d3:6f:01:67:c6:d3:53:a7:54:87:52:57:
58:04:e0:0a:85:4d:f7:a3:9b:f8:50:6b:73:b5:95:
75:d6:29:10:d8:73:f9:96:d2:be:61:e7:b3:d9:81:
71:05:c0:08:ec:1c:66:80:42:a0:88:8f:8f:18:36:
5e:47:59:53:c0:84:7b:50:4f:8b:1a:9b:44:a0:61:
12:32:21:ce:76:21:8e:9a:77:3f:36:79:34:8c:61:
6d:6a:87:78:8b:a0:16:09:ce:86:f9:f3:bf:29:48:
7d:74:e3:19:a8:5b:fb:74:7a:56:e1:c2:63:e7:e5:
15:df:95:c1:83:9a:46:49:7b:0c:6d:b2:d4:32:50:
d1:9e:ff:24:8a:8e:4e:cb:59:e9:71:b4:70:93:3b:
8e:28:42:93:99:5c:c3:0c:e4:65:38:5c:e7:33:5a:
7d:df:52:ae:96:49:77:5b:c1:c5:f8:4c:07:d8:b7:
cb:74:8d:d8:b8:02:ea:02:fb:a8:f1:e3:7c:bc:36:
59:49:ef:8b:3e:bf:5a:de:37:0d:9c:b1:cc:34:3d:
8b:ff:8b:4a:84:50:3e:00:f0:4b:eb:72:1a:14:72:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F0:D0:5D:AE:FD:E3:32:F3:C4:C5:C3:8F:52:79:11:CC:21:81:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d1b386c-2435-3547-a5f0-a22c80e99478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:e5:cf:53:86:1f:82:af:91:8b:38:be:b0:0b:95:18:a6:a0:
a3:93:61:b5:c8:ab:fe:ab:43:85:18:bf:af:a2:f2:3e:4c:37:
ba:b8:8b:6e:4e:c2:04:d5:e5:ba:f5:d6:68:22:cc:71:9c:43:
99:1e:b7:b3:a0:36:23:9a:96:98:f8:01:4d:cc:99:df:ac:31:
c0:8a:7a:f4:01:04:44:68:cc:16:62:9b:ef:74:52:5d:3a:28:
43:13:4a:f2:5d:57:80:f7:e0:3f:44:ed:fb:77:9f:c5:1d:84:
bf:38:2b:93:cc:10:c3:cc:c0:8d:12:2b:2a:df:26:7b:75:e8:
d1:fb:a3:08:2b:51:41:64:d5:c6:c6:99:0d:7d:25:cc:2e:29:
42:17:07:c5:57:4b:08:42:ab:8c:b1:5f:b5:8c:f5:5a:ef:23:
d0:56:68:b7:d7:08:3f:b0:94:3d:b1:34:80:d2:85:ca:7e:c4:
e1:75:31:71:7f:43:19:69:3f:c7:cb:56:54:10:e8:b4:bf:32:
5d:60:45:7b:9a:a5:5d:58:84:a1:c9:6a:15:25:98:f8:bc:72:
23:76:55:a9:41:14:ad:ef:6c:d7:69:4a:a9:38:cf:ec:f6:e6:
74:5e:73:db:c9:0b:d4:a6:75:22:55:b0:21:08:d1:d2:10:6b:
26:35:05:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:18 2025 by rpki-client on console.sobornost.net