Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/79814cba-34dc-3c46-bba8-f2748c8cf241.roa
File: 79814cba-34dc-3c46-bba8-f2748c8cf241.roa (raw, json)
Hash identifier: j063OU+uvQ7MtL9X5Akzy6Zlh6MzxeHJMw73sJCBgyE=
Subject key identifier: 8A:01:45:DA:AE:7C:61:AB:46:B5:1B:0E:04:29:78:F8:AC:7E:96:30
Certificate issuer: /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Certificate serial: 010D0C9F4328584851A57D4BB5F5FB9550770D00
Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/79814cba-34dc-3c46-bba8-f2748c8cf241.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 26842
IP address blocks: 12.171.137.0/24 maxlen: 24
12.189.192.0/24 maxlen: 24
12.189.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7d:4b:b5:f5:fb:95:50:77:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=945ff832-e920-45e3-ae1c-9f2480b843be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:47:76:d9:ba:75:f9:e3:1a:a3:55:5f:20:
97:78:56:51:cf:f9:8c:59:b9:d2:85:17:5a:94:c6:
ac:8c:5d:85:87:e1:67:db:65:d3:3c:f1:02:97:50:
92:d6:32:2a:cd:02:1d:c2:b8:49:68:b4:76:47:ac:
3e:8d:41:1d:19:56:24:7b:e9:91:f5:2d:96:53:85:
5b:b9:2e:c2:cc:52:86:e7:1b:b0:af:bb:c4:27:14:
e8:93:ac:00:b4:53:d9:9c:e6:78:a6:7d:75:21:09:
31:1b:56:4e:e6:3c:bf:4d:b2:9c:8e:b6:4e:20:15:
79:4e:02:45:e1:7b:0b:36:ab:37:cb:95:b9:2c:d5:
75:cc:53:9d:8f:42:22:72:18:47:b1:fb:db:90:2f:
84:46:cb:bd:ef:6c:9a:69:66:42:b4:01:7d:47:0d:
58:e3:37:1a:18:f3:c6:65:ab:90:f8:de:04:c8:9d:
4e:3f:28:5e:4d:1b:21:47:68:21:e2:0c:ca:99:62:
40:86:dc:07:7f:13:87:a8:e5:c9:70:16:5f:f2:8f:
cf:56:6a:b7:74:9c:37:be:4c:f6:dd:31:01:05:cc:
d6:f4:fb:94:45:34:5b:e1:a4:3e:af:37:1d:f5:f5:
db:a0:70:c2:97:e8:c8:5e:40:85:01:7d:68:d4:44:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:45:DA:AE:7C:61:AB:46:B5:1B:0E:04:29:78:F8:AC:7E:96:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/79814cba-34dc-3c46-bba8-f2748c8cf241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl
X509v3 Authority Key Identifier:
keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
sbgp-ipAddrBlock: critical
IPv4:
12.171.137.0/24
12.189.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:10:a9:e7:80:f9:a2:ae:15:a5:e8:0f:e6:1f:34:a8:23:da:
d1:97:fb:af:39:8a:9e:c8:14:a3:0c:46:58:a1:1e:c3:5e:e7:
1b:61:fa:f3:1a:15:13:7e:ba:74:b8:cf:b0:d8:70:b0:b4:71:
66:fe:d1:43:5d:03:2f:23:71:a1:31:0d:2b:14:4c:16:34:bd:
d9:1f:f9:3d:08:7c:f3:da:13:bf:a9:5f:a7:dd:8e:16:c2:3e:
e3:da:f4:13:55:ca:ea:84:e2:c1:fd:dd:d2:a1:90:f5:7e:f8:
d7:c5:1d:c3:56:18:46:f0:d9:10:61:98:b6:b5:29:db:f6:9b:
f8:81:80:37:7d:49:95:02:d0:87:c9:f1:96:8f:2b:72:05:22:
81:59:9f:e1:64:97:69:ba:d5:b8:2e:90:5c:2f:02:79:38:b6:
dc:5f:30:e9:20:6a:85:ec:62:9d:5d:2e:5f:e8:8c:12:95:4f:
1c:b2:10:9c:a5:99:0b:db:d1:d3:c0:97:2d:9f:6e:d9:c6:42:
c6:a0:30:c7:01:da:a9:83:a6:35:6b:90:d4:33:fb:36:03:aa:
fd:d6:95:3a:0b:85:33:fa:b1:cf:1d:cf:56:87:c0:92:b0:d3:
45:57:04:b0:f2:b3:c2:6b:d5:57:8c:ed:f8:68:0c:70:3a:9c:
c0:4a:76:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 03:37:13 2025 by rpki-client on console.sobornost.net