Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa
File: ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa (raw, json)
Hash identifier: WJcBb+nSXm5h4z9lf+7tlN2d6x7ysShoiUqmCYsHlAg=
Subject key identifier: 34:DF:38:CB:29:6C:C2:2F:E5:7E:92:61:30:8D:21:00:DF:45:97:0E
Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial: 010D0C9F43285848B35B6827D2CB4D1649D84380
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 19886
IP address blocks: 171.162.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:68:27:d2:cb:4d:16:49:d8:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=b00b414a-4ca0-46ce-b2c8-fda2f79fd0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:ae:af:cd:64:0b:ee:9a:ba:86:ce:10:b9:
09:4b:75:5b:f3:1d:38:bf:6d:12:c5:d0:d8:a2:7b:
b5:ba:bb:5e:b8:0c:c4:3c:7c:c3:c0:8f:8a:07:26:
8c:3c:0f:73:bd:25:9c:e6:33:34:98:ae:ac:c5:ca:
b4:32:a8:8a:4f:8c:0b:27:b5:9c:10:ea:2e:c9:4f:
7d:e8:f8:77:37:f3:93:43:d8:84:c9:d0:25:b8:24:
19:56:6d:f3:a9:e4:d1:ab:ba:6b:3f:a3:0d:8e:85:
2d:1d:fc:28:d8:08:c8:c0:5c:da:73:d0:4f:37:9e:
c8:b5:9e:c5:46:ae:76:30:c8:25:c9:8a:ca:09:f6:
1f:47:ab:db:19:a1:83:16:d7:c6:af:5f:c4:1b:ba:
56:d5:df:7d:e8:eb:ab:02:d3:30:80:de:23:4e:f2:
f0:6f:34:7f:49:f3:65:84:0b:fa:5d:34:7d:2a:44:
0f:ad:af:5f:98:f0:c7:2e:3c:cd:41:2d:e7:1c:10:
fb:43:82:41:5d:09:94:42:df:10:4e:4d:95:d5:c7:
7c:4a:d0:42:20:99:5f:4c:cd:92:83:b6:6f:e1:2a:
c6:a6:bb:bc:f1:6f:7c:46:94:f1:8c:f0:df:63:e0:
b7:07:01:24:03:df:41:61:a2:bf:f6:36:b1:42:7a:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:38:CB:29:6C:C2:2F:E5:7E:92:61:30:8D:21:00:DF:45:97:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ddb2afa1-7e36-3ac3-9514-51ff2b9d5018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
X509v3 Authority Key Identifier:
keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
sbgp-ipAddrBlock: critical
IPv4:
171.162.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:ed:fc:6d:53:93:c6:00:fc:4a:70:52:7e:06:6b:b9:ce:1c:
87:c4:7d:8c:f7:61:2f:75:5c:d5:2c:56:f6:2a:da:c4:18:74:
56:ce:af:de:6e:d0:54:3c:08:1c:df:a3:6f:73:f4:fb:4f:4b:
5a:f3:27:82:1b:8a:ba:a8:c4:5a:5e:32:b0:1c:fd:28:36:62:
24:ba:16:fa:10:39:a9:46:b0:eb:20:6e:35:8d:9c:b5:08:e7:
35:ea:81:8c:f0:9c:b9:03:62:10:c3:b4:ee:c4:c1:f4:6c:fb:
d9:ed:02:dc:22:67:7c:1a:25:c3:b1:b7:12:68:b2:4d:4f:8f:
ed:8c:d9:4d:e3:6a:1d:38:d2:5b:f4:33:78:63:21:ea:9b:6c:
88:61:1e:c5:3a:e6:01:c1:7b:be:f3:28:c5:b3:ea:93:9d:ab:
21:46:65:9a:db:15:50:6e:59:89:dd:33:f0:21:91:0c:e0:c7:
a7:e9:d8:1c:eb:6e:50:1d:7c:da:86:e7:61:d5:6b:6d:e8:bf:
d7:b6:f6:83:a2:c1:33:25:8d:26:c6:1c:30:2c:7e:26:bd:91:
bd:db:80:1f:17:ab:9a:2d:7a:fe:20:f3:97:23:c4:52:b3:03:
0b:fa:46:28:e2:23:90:19:24:5c:59:f5:89:7f:3e:3f:94:26:
14:69:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net