Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa
File: b85ae6d7-e6f8-347c-9094-7c500122ea64.roa (raw, json)
Hash identifier: BPwWowvEixEk4ZVP7pepLkoC6AU2l9HXdC0T3a4YOc4=
Subject key identifier: EC:DE:70:9B:6E:F1:92:FC:21:A6:15:81:FD:10:DC:6A:4F:D1:FB:E8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C7F5BC3CE06D6BB3E238D4C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa
Signing time: Wed 05 Feb 2025 11:07:52 +0000
ROA not before: Wed 05 Feb 2025 11:07:52 +0000
ROA not after: Tue 06 May 2025 10:07:52 +0000
asID: 30036
IP address blocks: 173.16.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c7:f5:bc:3c:e0:6d:6b:b3:e2:38:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 5 11:07:52 2025 GMT
Not After : May 6 10:07:52 2025 GMT
Subject: CN=3abcec83-14b6-4046-919d-b5999e6a9fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:a4:21:31:46:08:91:3d:fd:02:9d:f8:a3:
b3:37:fb:8d:50:bf:a5:36:30:c2:a0:f6:0a:1a:1a:
ae:49:38:5f:82:76:d5:c3:7a:bd:6e:a7:29:83:70:
cd:4b:93:29:0c:b4:5f:03:65:19:b1:72:53:83:8f:
e8:f2:b1:c1:89:a4:58:5e:72:67:43:3d:a6:8f:a8:
84:25:2d:12:70:33:a2:c1:e0:53:5a:2a:7f:80:81:
b6:b8:86:78:bc:2b:d7:d4:b7:74:af:af:83:cf:9c:
31:aa:7f:3c:b5:e3:73:5b:e2:61:2e:1c:cd:30:a9:
b5:19:ba:c8:bb:d3:c0:4f:53:ca:7a:f1:f6:58:5b:
19:5c:a3:31:41:64:ae:66:1f:56:45:67:9e:08:bb:
e5:ee:50:b9:5e:3c:ab:48:e9:49:5a:ef:a9:92:33:
14:be:7b:70:d3:13:05:b5:54:9d:59:8a:b6:c1:b9:
78:77:eb:0c:ab:13:63:11:b8:b1:84:70:12:bc:8f:
d5:49:7e:1b:2d:39:44:30:eb:3f:8e:e7:ca:58:de:
38:bb:64:30:20:f3:41:fd:d4:c3:d0:97:25:b5:e3:
c0:04:0c:c2:d3:8e:d2:63:15:97:d0:91:cd:0f:84:
4c:90:8b:1e:51:c5:e6:0d:99:12:ce:94:bc:37:46:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DE:70:9B:6E:F1:92:FC:21:A6:15:81:FD:10:DC:6A:4F:D1:FB:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:45:99:cd:92:fa:4f:53:a9:8d:c0:03:ec:3e:7a:07:cb:9f:
0c:52:af:63:82:f4:83:a0:fc:c2:1a:30:3f:dd:67:85:3b:da:
34:9f:6a:9f:42:6b:9e:92:c8:8b:c3:01:78:d2:9c:db:9a:9c:
66:87:5c:bc:a2:35:fd:35:ce:f4:e1:7c:6c:a9:c5:c0:8c:5d:
32:ae:e8:53:4e:6c:41:65:8e:2e:ee:7b:7b:45:ec:a8:b1:4c:
3e:d6:7e:4e:91:22:05:68:c8:6d:35:21:8a:85:2d:82:7a:43:
3d:60:3a:ce:6d:d0:0d:e4:ed:2a:8d:89:00:87:f1:3e:7e:ed:
4d:8c:b2:c6:ce:99:f5:47:3c:67:a9:a1:d9:f2:81:c0:a3:a2:
a0:5b:1e:d8:8c:22:12:47:56:e1:6d:1b:2f:82:01:66:55:ab:
f7:f9:27:09:a8:c2:34:57:2a:e4:b8:69:1f:77:d5:a4:64:ba:
1a:a9:f3:f5:30:f3:15:7b:89:c6:66:01:3d:d4:2f:f8:0b:bc:
00:92:1a:80:89:ad:59:97:01:1f:36:44:59:6c:0d:fa:a8:a9:
ce:be:bb:8e:b6:c3:e6:c0:fa:58:f8:ec:6e:59:5c:4b:c6:79:
bc:bc:b1:37:60:47:95:fa:78:93:88:06:fb:ab:87:99:34:82:
19:d8:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:20 2025 by rpki-client on console.sobornost.net