Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c304d182-c487-3a1b-8662-518b3c299709.roa
File: c304d182-c487-3a1b-8662-518b3c299709.roa (raw, json)
Hash identifier: hbQuDFoceik40A0M0l06QQwmxyPRZqVB9D5DYYpj6ME=
Subject key identifier: 0A:1D:62:64:4B:84:18:B4:F9:7C:F2:F5:4B:D2:D4:FC:FD:AA:68:6F
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F4328584858A0529C94525320987AED20
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c304d182-c487-3a1b-8662-518b3c299709.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 18594
IP address blocks: 208.70.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:52:9c:94:52:53:20:98:7a:ed:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=d52995b5-01c8-4b4f-827e-f2c44b9ea0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f7:5e:aa:fe:51:bb:1e:53:79:b1:ba:d5:23:
4f:00:8a:14:a8:a5:07:22:2d:03:bc:f4:f1:e5:60:
e8:c0:f3:b7:36:41:5f:bd:ff:0a:d5:4a:34:e3:61:
77:03:2a:b8:2d:1d:52:e7:78:59:3e:61:e2:35:ee:
3a:b9:cb:79:ab:15:6d:88:dc:5a:ac:32:52:3d:82:
b2:57:47:97:db:fc:b2:23:ed:2b:4f:7b:2a:2b:2e:
79:72:74:55:ab:c5:d3:14:d7:4f:75:4c:d9:b8:50:
6c:ae:22:f2:4d:6b:57:8a:9f:87:d1:0d:32:d9:19:
99:4c:5d:4d:63:dd:0e:45:83:ea:1f:46:55:de:62:
10:f6:fe:2d:c7:88:44:be:11:0c:ca:e2:81:45:3d:
96:b9:9f:b2:ad:f3:29:9c:05:06:85:da:a7:31:06:
b3:ea:af:ac:73:dd:f3:51:20:08:d9:be:09:59:36:
98:a6:53:9c:62:cf:34:fe:96:be:e6:f3:2a:5e:b1:
df:78:1f:ff:3a:c0:23:46:24:31:8c:93:c3:6c:bb:
59:89:db:0e:db:1d:e1:55:3b:00:bc:a0:bc:54:09:
13:cc:71:fc:1c:e3:ef:19:ee:af:93:6c:9e:0b:f4:
3b:14:19:21:fa:47:4b:91:c7:d0:1d:86:da:20:15:
01:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:62:64:4B:84:18:B4:F9:7C:F2:F5:4B:D2:D4:FC:FD:AA:68:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c304d182-c487-3a1b-8662-518b3c299709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:b0:ce:2d:76:99:ea:3f:4a:04:51:79:5f:20:5f:e6:a0:48:
8c:64:f7:15:ec:04:5f:fa:13:35:69:92:2e:cb:51:1e:c2:f8:
bf:c3:2e:a3:4d:4e:41:e7:64:f4:7e:61:2c:46:9c:54:1b:ac:
3e:ca:1e:7b:e5:37:9a:22:84:4a:0e:9a:c0:ef:6a:55:f2:66:
97:7f:db:f3:14:98:05:bc:15:c8:cd:f7:8c:c6:b4:0a:49:9d:
13:2d:75:fd:68:ce:43:69:33:9c:01:fe:b7:e5:bf:a1:da:fa:
41:bd:54:9f:47:af:b1:52:60:6a:de:c8:36:fb:24:4d:16:a7:
d1:8a:44:2e:dc:30:9b:1d:79:d2:20:f1:b7:48:f9:80:d2:6b:
70:a4:36:24:db:c1:7a:2b:aa:77:0c:8d:1d:66:a3:d0:ba:dc:
6f:f3:a9:76:7c:ed:85:c5:49:f1:b4:fd:4f:82:f9:ad:b7:1c:
a2:ab:2d:d0:34:4b:fd:43:f1:3b:ad:c1:4c:8b:06:dd:9c:57:
1d:f2:7d:36:26:e0:05:e2:a1:39:7f:b1:d2:bb:c4:9c:fc:b5:
b4:4f:61:88:2d:ad:04:64:31:c1:f4:f9:86:ac:3f:f2:6e:bb:
73:19:e0:53:b8:79:f3:5f:15:48:89:01:5d:0b:3e:16:36:c2:
77:86:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:14:42 2025 by rpki-client on console.sobornost.net