Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa
File: 3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa (raw, json)
Hash identifier: g+cHyIvLCcImJ1RuFp8bHDBOdDsgV+N5pjXzKCv30U0=
Subject key identifier: AE:CE:D2:17:DB:C0:F1:72:B2:72:65:2E:C1:DE:02:13:51:04:A1:18
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858496CE450BA5341B7232D39D000
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 33442
IP address blocks: 149.23.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:50:ba:53:41:b7:23:2d:39:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=79af6ae1-c653-47d5-9a33-e87d7c815752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:04:7b:83:fb:81:f1:82:92:fe:8e:0c:af:
b8:c6:67:c4:bb:43:ec:b6:16:24:ea:46:9d:92:23:
2c:89:a6:8a:87:48:bf:ca:f1:0b:35:44:c5:0f:e0:
8d:75:29:58:a4:44:ff:72:45:87:12:9f:5b:d6:6a:
44:1d:e3:81:f7:ae:76:f4:04:d8:da:9d:cc:00:64:
85:8f:db:1a:39:12:f5:70:17:ab:ab:af:69:7f:e8:
f6:4a:ad:6a:b1:23:f3:83:83:e9:b9:98:8c:15:08:
8d:d2:66:75:a8:50:65:eb:36:98:64:3c:ff:25:61:
3f:b1:60:e3:20:41:9a:7f:69:ce:37:50:32:2c:98:
fa:a1:3e:ec:b0:5c:e7:2a:ef:3a:79:20:fe:fe:a1:
0f:80:f8:bd:6c:96:cf:ed:7a:c9:f1:23:8e:fb:d4:
0a:f9:31:9f:28:75:a6:6f:13:49:ec:62:23:fd:f5:
ab:43:b0:93:2e:cd:20:35:71:82:6b:de:a0:e1:aa:
82:2e:3b:49:93:b9:c7:06:be:47:5a:35:09:8a:9d:
0b:79:94:c1:b4:10:c6:e4:cc:fb:f0:3b:af:a2:6c:
a5:9e:6d:e4:de:4e:8b:a1:f3:9f:64:dc:c5:16:e9:
3a:b7:52:a1:15:44:25:14:47:bc:9e:6c:bc:3c:79:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CE:D2:17:DB:C0:F1:72:B2:72:65:2E:C1:DE:02:13:51:04:A1:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
149.23.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:dd:c2:af:82:14:4b:c9:ed:76:9b:f8:c7:51:b8:50:4f:fb:
6b:03:86:be:be:7b:a1:84:7f:fb:8c:47:9a:11:c0:76:26:21:
ce:e5:a7:e1:16:90:5c:b6:17:61:02:9b:96:ab:fd:18:63:a6:
45:7f:7a:99:cb:b0:8a:90:71:48:b3:df:7c:cf:dc:f7:22:1e:
80:b2:76:16:1e:71:0c:4e:26:a9:b1:60:27:cc:70:76:a5:67:
05:90:64:0f:49:a4:8a:b2:72:ea:c9:cb:68:7d:81:17:25:77:
9d:f1:67:ba:e2:ce:ca:9a:fe:83:8d:86:f0:b4:80:93:36:fd:
54:ad:d1:75:e3:32:a1:14:ed:da:62:fd:b3:ab:38:c2:cc:87:
94:6a:cf:d0:83:90:59:48:20:50:19:14:bf:78:bb:8f:3e:d5:
01:d4:bd:40:b4:64:2f:bd:c1:58:52:3b:d8:38:e2:48:9d:2e:
3b:69:3c:bc:0b:b5:fa:4e:59:66:fd:37:71:a7:98:16:fb:6b:
e6:40:08:9c:0d:c8:2d:97:c5:c0:be:54:28:ca:13:a3:29:f9:
6a:92:30:8f:5e:52:78:d5:15:4e:8c:91:b4:3b:66:38:a4:f0:
d0:29:dc:78:47:2d:30:a1:f0:6a:e6:cd:23:42:c5:cb:f3:14:
74:07:cc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:49 2025 by rpki-client on console.sobornost.net