Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa
File: 2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa (raw, json)
Hash identifier: TGnOqNgdAEsc9y065LinwyEpAjq7QAsndT+rGwK8o2A=
Subject key identifier: C3:C6:82:91:FD:13:98:DE:7D:51:39:B6:23:06:FE:5B:7E:59:1C:A7
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F432858496A199AA09D12FE94AC685B40
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 21777
IP address blocks: 204.144.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:9a:a0:9d:12:fe:94:ac:68:5b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=07c8ab30-cd59-4cf3-83f0-f312980b8e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:13:d5:f3:6d:bd:67:d2:cc:6e:a1:c3:a1:
04:43:e8:83:30:a1:53:5f:9e:cf:fd:45:9d:94:1f:
5b:00:06:a1:d3:53:1b:06:08:38:ea:51:bb:1c:3b:
cc:08:9c:af:0f:bc:49:d7:e4:ef:6a:52:03:32:89:
33:b7:bd:9e:95:75:1b:57:9d:73:34:51:85:5e:a6:
69:44:fb:3a:23:2e:c8:52:d1:04:53:62:4f:ba:be:
99:0c:a5:6a:f8:ea:99:38:3d:f0:6f:1f:85:b2:72:
84:5b:fe:4b:12:0f:78:06:6b:1d:95:58:d9:f6:20:
d6:ea:bc:73:b9:3c:2d:72:af:3c:36:96:c3:52:0d:
d2:c5:f4:3a:de:20:ec:55:24:c5:8f:07:ab:01:77:
58:68:72:d2:8a:51:23:71:27:03:4c:52:8e:12:43:
f9:55:04:c0:08:8b:2b:33:f1:e1:77:b7:34:c8:b3:
48:ab:74:33:b9:de:d8:69:a5:b2:87:b5:75:ef:a2:
d3:d0:0a:33:d8:91:fb:29:96:cb:e8:0d:81:d2:08:
21:d1:95:9d:f5:c8:57:da:fb:4d:18:b9:32:dd:6c:
71:da:4c:40:ef:d2:85:ec:7a:32:87:b0:2b:0e:8a:
8d:d8:01:20:ef:b9:57:f0:cc:82:b8:a9:0f:6b:0b:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:82:91:FD:13:98:DE:7D:51:39:B6:23:06:FE:5B:7E:59:1C:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.144.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c5:c2:6a:b3:86:51:da:b4:16:73:97:83:1f:2d:4d:d8:b0:
84:19:b3:3e:bf:79:d7:06:26:a4:f3:1f:cf:84:25:0e:86:2c:
1b:a8:2e:df:fb:af:97:35:b8:9e:2f:da:b9:fc:e7:c9:b4:f1:
19:6c:0c:66:e1:6d:43:02:f1:87:22:4f:0a:cf:11:43:2e:18:
78:4c:62:6b:e1:d7:72:54:34:0b:58:59:02:30:ad:e9:98:4d:
86:f8:92:07:0f:cb:a4:58:48:17:6d:d7:e3:a2:06:c0:14:a9:
8b:a0:dd:83:19:79:b7:ff:e1:5b:51:3d:04:9c:bf:aa:82:59:
a8:e4:65:72:7d:55:3a:3c:4e:83:75:66:72:0a:8b:44:15:5a:
9f:0d:8a:a5:e2:93:0e:78:34:8c:52:13:32:05:a8:fd:e4:cf:
f1:d2:c4:01:e9:1d:2c:00:53:c9:b8:24:6f:6b:92:2d:df:28:
f0:e5:27:93:61:ae:a7:87:7b:36:d7:18:24:38:b5:1c:af:cb:
1a:42:3b:ff:14:cc:a3:f4:74:05:a4:7c:9f:a1:0c:cc:af:a8:
52:e0:22:81:c7:4e:0e:c9:7a:de:96:f0:75:4e:44:57:d5:72:
8e:21:52:39:aa:bc:4c:50:28:e9:39:d8:b6:d1:c7:35:ca:10:
fb:85:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:40 2025 by rpki-client on console.sobornost.net