Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa
File: c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa (raw, json)
Hash identifier: 9JkcDGszgcxzYLvzmnLamM5xxsiZp5oMjS7dQgQmqbw=
Subject key identifier: DB:2E:D0:9E:CC:EC:7E:A0:E8:9E:35:F9:94:11:E8:51:BC:F0:45:D0
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C55F306DE3679F1670B63100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa
Signing time: Tue 04 Feb 2025 12:52:56 +0000
ROA not before: Tue 04 Feb 2025 12:52:56 +0000
ROA not after: Mon 05 May 2025 11:52:56 +0000
asID: 30036
IP address blocks: 173.20.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:5f:30:6d:e3:67:9f:16:70:b6:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:52:56 2025 GMT
Not After : May 5 11:52:56 2025 GMT
Subject: CN=4d5571c3-eab5-4be5-b8ac-81925c5ae77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:06:a6:b0:72:fa:84:57:2b:a8:f3:a3:45:
91:a7:c6:06:86:e6:be:c5:9b:1c:21:3e:1d:48:53:
4d:1c:c4:4a:d4:34:04:8c:84:1d:8a:01:f6:cc:83:
44:f0:3a:7c:0d:fd:23:4f:25:a1:30:cf:21:d5:ca:
20:14:8e:f2:9a:ef:d7:b7:cb:9f:6a:26:9f:84:72:
32:0c:3b:13:cf:93:59:93:8e:a2:74:89:8d:ba:b9:
46:a1:31:d7:de:1c:3d:7e:ba:5e:bc:24:1a:cb:a1:
2b:56:02:0d:d3:df:58:c9:40:ab:67:2c:f8:3d:43:
df:d3:eb:9e:ee:65:bf:c8:cc:cb:01:cf:51:07:03:
c9:53:7c:1a:8d:2e:8a:00:53:ba:d5:2b:68:06:4b:
f2:a2:92:ff:46:b7:10:08:a8:56:a3:92:14:be:bc:
a6:f2:49:5e:b4:62:84:4f:33:a1:9b:39:1f:11:5d:
3e:32:59:df:e5:11:ec:5d:b8:7a:bd:c9:d1:7b:06:
49:42:33:15:2b:84:49:0a:9a:21:c3:2d:73:64:98:
fa:16:d2:e8:4d:9c:64:dc:37:a6:54:e5:0f:23:1a:
f8:b7:bf:67:55:1f:33:43:97:f9:55:19:e3:cd:d4:
81:81:fd:01:11:cb:a8:34:bf:81:1e:64:22:48:52:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2E:D0:9E:CC:EC:7E:A0:E8:9E:35:F9:94:11:E8:51:BC:F0:45:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:15:e5:76:91:bc:4c:46:b3:ad:11:21:fe:b9:87:43:47:d3:
16:e7:e9:df:1f:ad:41:97:ed:9d:64:94:76:cc:6b:f1:0a:9f:
ee:e3:5c:5e:1b:fa:50:71:9a:26:bc:a3:de:7b:9e:ed:43:4c:
f5:91:2a:ce:f3:46:61:cf:15:dc:fb:6e:ce:23:fe:32:41:4d:
6b:6f:96:3a:03:c2:4f:8e:c4:2f:2e:ba:d6:48:e8:80:4a:0c:
db:90:73:3b:8b:f8:1c:81:d9:d0:f2:a9:4a:92:27:73:80:d8:
68:6a:27:bc:e0:82:1c:c7:1c:3a:80:c8:c1:8d:21:63:6d:51:
4c:5d:6f:0d:fc:21:a5:49:c4:6d:66:82:97:37:7a:7c:ea:b6:
07:ce:7e:09:f9:76:81:e6:19:17:a6:69:81:fc:63:68:ac:9c:
52:0d:95:8d:9b:3d:3b:b3:47:a4:6b:0b:a4:0c:d6:c9:e5:2d:
d3:9e:eb:a7:a1:53:ac:69:64:03:98:5b:20:a1:d6:fb:54:34:
46:60:76:ab:47:21:fb:2d:e6:a8:18:87:07:75:e7:25:ef:94:
57:8f:33:b3:7d:0f:99:cf:23:8e:0e:ae:7f:3c:11:62:1c:19:
0b:19:94:d4:fb:bd:3a:3d:58:27:59:1e:91:5d:01:34:d2:fd:
9f:c3:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:20 2025 by rpki-client on console.sobornost.net