Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa
File: f00191ea-7649-3395-af77-d4da4f50995c.roa (raw, json)
Hash identifier: e44Qft0/ca+FcqFgIbCJDQ5zcAQ2rxDKX1VC8nquZZE=
Subject key identifier: 03:A4:E5:BD:BC:6C:8B:9B:E6:DB:7F:5B:DE:EA:8A:1B:92:5E:D6:2F
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584908EC45A5D2C835248687C300
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa
Signing time: Fri 28 Feb 2025 17:36:21 +0000
ROA not before: Fri 28 Feb 2025 17:36:21 +0000
ROA not after: Thu 29 May 2025 16:36:21 +0000
asID: 16509
IP address blocks: 170.85.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:ec:45:a5:d2:c8:35:24:86:87:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Feb 28 17:36:21 2025 GMT
Not After : May 29 16:36:21 2025 GMT
Subject: CN=f4b693f4-852a-45d8-9778-4c0e9e02423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:de:6b:7d:07:80:fb:9b:ff:51:0c:74:8e:
fc:7c:8a:89:6e:33:0d:e9:28:57:03:3e:92:ea:02:
e5:05:9d:c1:a9:1e:d9:fc:b3:51:c3:e5:86:e0:20:
cd:5b:6f:62:2a:b0:45:7c:e5:d1:91:5c:3c:0c:e9:
06:de:74:21:d8:30:25:c8:48:5d:2f:b6:d2:c4:f0:
f6:00:75:7b:8d:10:d8:f2:73:81:b7:23:e3:97:d3:
8a:27:30:65:b2:8a:f4:89:73:aa:15:65:24:a2:f9:
c2:73:19:d2:7f:f0:22:7c:80:e7:f6:ad:2d:a0:55:
6b:0b:d1:c2:79:33:d9:98:9d:f4:19:cc:64:3f:6d:
30:ff:f4:be:78:4c:43:65:c8:99:1c:4e:50:3f:e2:
2a:9e:2d:d0:33:7f:bd:0d:31:31:af:d9:a4:ca:de:
85:a7:99:31:c7:cb:15:36:83:d1:6e:f3:7d:91:0a:
19:8c:53:7b:9c:80:8e:74:94:70:8c:5d:96:8e:be:
b7:df:ef:14:fd:12:92:7f:b0:47:ed:76:f3:a8:13:
12:4e:81:af:27:4b:1c:0e:80:6e:b8:37:be:60:da:
00:09:6d:87:d1:92:1f:9b:f9:6a:a3:95:e7:e0:e9:
68:b7:7a:37:1f:86:31:3f:8f:21:97:54:90:ad:f0:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A4:E5:BD:BC:6C:8B:9B:E6:DB:7F:5B:DE:EA:8A:1B:92:5E:D6:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:6e:a2:3d:31:14:bc:5b:db:95:32:9e:2c:75:2f:fd:d6:1d:
0d:38:2d:8d:91:0a:e5:dd:c1:1e:54:d4:32:58:24:18:0a:4a:
98:a1:b5:0f:19:31:cb:d3:9a:c0:ca:b8:49:41:43:35:7c:15:
25:09:ab:de:f4:81:ed:29:d4:ae:fe:88:92:4b:73:4a:1d:04:
16:c0:a6:e8:7c:bc:47:84:d7:e5:c1:27:5a:50:4e:30:c8:b8:
f0:39:0e:fc:c0:47:2c:03:68:f7:ff:ad:26:51:3b:a3:c8:e2:
83:38:c4:a6:80:0a:04:91:1d:aa:ad:44:1d:94:3b:2c:c3:11:
fe:da:2e:64:10:6a:0c:5b:29:d9:bb:9c:8a:29:66:99:c5:ab:
cb:e1:d2:e1:c4:33:c9:61:55:31:ee:a8:2e:78:60:9f:26:f8:
d2:f8:a8:b9:39:b7:fa:91:0d:be:6a:2c:a5:a0:6f:36:16:34:
ff:6b:fd:d2:13:51:bc:d1:b8:4e:48:fe:ee:da:8b:b1:66:22:
ac:26:74:df:d7:82:4f:13:ba:2d:05:5f:d3:9a:00:4c:53:2d:
a9:ee:58:a9:99:04:ac:bf:6d:c4:87:b0:87:35:d6:38:36:52:
57:b9:cd:83:e8:51:a9:56:28:27:75:bb:87:7c:6c:86:74:c9:
21:ae:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:41 2025 by rpki-client on console.sobornost.net