Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa
File: c385f14f-caf2-3315-957b-4d9e053824be.roa (raw, json)
Hash identifier: OOOVXUTchd8skjHmbKSZ8uShCEXPmo51FztTziqFE3E=
Subject key identifier: 72:AF:D3:A0:77:16:79:1F:F7:FF:94:A8:EF:37:29:A6:C9:58:1A:9E
Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Certificate serial: 010D0C9F43285848C9B0DF0B7910A9FCE3A8E550
Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa
Signing time: Thu 06 Feb 2025 02:00:39 +0000
ROA not before: Thu 06 Feb 2025 02:00:39 +0000
ROA not after: Wed 07 May 2025 01:00:39 +0000
asID: 40495
IP address blocks: 174.137.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:b0:df:0b:79:10:a9:fc:e3:a8:e5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Validity
Not Before: Feb 6 02:00:39 2025 GMT
Not After : May 7 01:00:39 2025 GMT
Subject: CN=c14cb8b4-8dee-411f-acae-891fce63ae27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:05:61:16:a3:21:cd:68:ad:99:92:38:c9:
9f:c2:1d:3b:18:50:72:72:8e:d9:d7:69:4c:a3:6d:
84:13:13:62:0c:4e:ad:f1:04:31:5a:e7:b0:cb:39:
e9:37:d9:10:96:f7:0f:4a:f7:cc:da:2d:34:c4:02:
61:28:fd:cf:71:f5:7c:e6:26:70:1c:f0:4d:31:70:
b7:95:49:ff:70:2a:be:ed:f4:88:94:44:14:54:f9:
b2:e1:b4:b1:81:d0:b7:2c:ee:7c:df:81:f2:21:06:
03:02:57:27:81:a4:b9:26:69:ba:c6:60:df:c8:64:
d0:49:11:3d:1f:d4:1c:86:90:14:26:e2:5d:50:8a:
25:c8:12:1e:ca:05:ef:62:82:8c:aa:48:c2:a4:e6:
de:c5:d0:b0:89:0c:d3:29:0e:a7:41:c5:ca:75:80:
7f:b0:6e:2f:c8:78:f2:29:d0:8b:04:55:03:1b:17:
d5:bd:7f:fb:47:bf:38:71:d4:00:6b:e4:8a:dd:8b:
62:6f:c3:dd:84:37:ca:4e:a0:c4:08:e7:5a:21:b9:
b2:b2:e2:c7:62:5c:bc:61:32:f9:26:14:b2:d3:ab:
73:c4:c9:5b:14:4b:c1:e0:78:a5:51:98:61:6e:e0:
97:ce:97:be:11:93:cf:1f:0a:60:a0:99:f0:28:e3:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AF:D3:A0:77:16:79:1F:F7:FF:94:A8:EF:37:29:A6:C9:58:1A:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl
X509v3 Authority Key Identifier:
keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:47:cb:b5:25:51:61:b1:f2:9f:e4:f9:7c:a0:44:df:5c:04:
8c:6a:8f:ec:6c:b2:c6:8a:bb:1e:de:b6:49:50:92:63:1f:0a:
24:10:95:5e:a4:b0:8b:79:a5:8f:3b:6a:0f:a6:1e:a6:76:47:
02:12:89:fe:9e:53:30:77:ca:42:0c:7f:0e:93:12:0d:41:52:
cf:a9:64:69:63:5f:5a:89:e8:bd:57:d0:96:a3:f9:0d:b4:cb:
50:d1:d5:27:84:97:ac:ee:6e:dc:e7:8c:2b:7b:61:8e:99:87:
31:32:e4:9b:3c:52:62:8b:00:55:9b:33:75:86:4e:4c:78:fd:
1f:ee:ff:cd:50:de:05:f7:1f:54:59:70:f5:c0:14:b6:e4:26:
35:d5:f8:87:9a:c4:b7:43:9b:0c:f2:b6:6c:df:09:36:1e:4b:
af:94:be:e3:2a:3f:53:ea:03:5f:63:51:b8:b4:15:ba:ec:59:
fc:57:97:c7:bd:11:3d:b4:57:2a:cc:fc:c1:89:79:0c:04:fc:
d0:f1:f4:c3:ba:18:8f:cb:7e:b7:be:29:86:d4:b8:17:77:fe:
e0:ab:a6:21:7f:02:c0:80:5e:d4:c8:7c:04:a6:31:a8:e9:03:
c7:6b:e9:64:29:f8:27:47:77:15:ef:03:78:4b:98:8a:30:6b:
2b:63:f5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net