Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/791984a7-9834-3a9a-954c-0a3c003dc955.roa
File: 791984a7-9834-3a9a-954c-0a3c003dc955.roa (raw, json)
Hash identifier: iY67ziX1QbXDTn+whNTeaDy9YmK83Fs8ZK/wUEglxRU=
Subject key identifier: 8C:8A:6C:69:20:35:C2:D1:B5:32:39:C5:14:03:8A:30:1B:3B:D2:DA
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F432858483F803B7923E8234049F27C80
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/791984a7-9834-3a9a-954c-0a3c003dc955.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 46450
IP address blocks: 147.124.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3b:79:23:e8:23:40:49:f2:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=d059e184-242c-459a-af79-638568b198f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:52:27:f4:37:0b:b9:cc:68:29:eb:cd:34:ee:
35:c5:53:7c:0b:38:aa:8a:17:2a:84:fb:dd:93:30:
8f:cc:20:b5:81:f2:d1:0d:5f:e7:38:22:ec:d4:aa:
ce:a6:8d:7e:19:3c:74:4e:c7:07:43:ee:70:f4:75:
e7:f8:fd:69:d6:92:ce:ae:87:3f:a9:3d:dd:64:62:
2c:9b:68:5e:f4:57:f7:ea:85:5c:e1:2a:ec:f3:54:
20:ef:f0:31:7a:5e:77:7f:60:69:f1:49:4a:05:99:
70:5e:ed:3c:2d:4e:6a:91:32:a9:90:46:0c:3a:fd:
d7:14:51:b8:e2:60:d0:a1:ca:95:e8:ff:a9:29:b4:
01:f3:5a:22:f0:19:7c:e7:8d:5f:68:21:59:c5:98:
ec:f9:07:0d:02:73:a3:db:ca:7e:15:98:dc:69:c2:
f0:4b:7e:05:f1:85:e8:d8:51:6f:39:f7:da:50:2b:
96:32:a0:c2:17:a6:ab:b4:81:36:f5:c2:5c:56:3a:
2e:2f:7d:1d:d5:34:e4:6e:db:48:63:c9:5e:d4:80:
d0:2a:03:d8:5a:a5:9d:69:cf:aa:05:47:a0:ff:9f:
66:8e:0f:ee:b0:0d:68:85:a7:77:8c:8f:76:ec:fd:
60:d9:5e:ae:a7:c0:0e:a9:6a:de:00:e6:fe:90:fb:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8A:6C:69:20:35:C2:D1:B5:32:39:C5:14:03:8A:30:1B:3B:D2:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/791984a7-9834-3a9a-954c-0a3c003dc955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:db:df:87:cf:be:92:78:7b:0b:78:40:44:95:8f:df:28:ff:
dd:3f:5c:e8:a7:a5:d6:83:2b:cd:2f:80:8e:a1:e0:55:a9:54:
76:f1:68:ac:6e:af:13:ef:e6:79:29:9a:b7:f6:5e:25:75:4c:
f7:76:70:0b:3e:3e:a4:4f:b7:c0:04:5b:bb:7b:ea:fd:3a:ba:
06:95:0b:ab:5d:fd:a4:aa:00:92:0f:9b:27:75:0f:15:ee:26:
92:25:cc:38:f0:83:4b:da:39:64:88:ff:42:70:d3:fd:a4:e2:
7f:6d:f0:2f:7f:13:52:fb:18:5b:95:db:e1:57:ae:0a:d6:f7:
47:50:52:db:08:dd:f1:c9:14:49:10:75:58:c9:cc:58:2c:fd:
62:71:fa:dd:e0:b8:f8:81:2a:d0:73:eb:51:37:56:b6:86:e1:
73:2a:c9:6e:74:24:a3:89:14:2d:6c:ca:c0:39:48:45:9c:da:
39:2d:83:55:4b:5a:ef:e5:da:ef:db:cd:5b:ae:cc:04:f5:98:
5b:db:da:7a:f3:1a:98:c8:24:d3:39:83:c0:b0:99:5f:29:46:
cc:4b:f4:05:65:50:5e:02:01:37:5a:51:64:f2:16:85:f8:39:
c8:7e:fb:d0:29:74:af:41:c1:e3:c1:80:57:47:89:15:38:f1:
51:fc:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:02:13 2024 by rpki-client on console.sobornost.net