Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/349d3b72-a194-37a3-95c4-97b0c3e9f593.roa
File: 349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (raw, json)
Hash identifier: ZKwXDenVc1yATRo0Qo4JSEf4WSvRPFuYdmIPWe7dOSg=
Subject key identifier: DC:95:E2:4B:3E:40:3C:C7:57:E9:8F:A0:61:78:FE:F4:95:D5:6E:B4
Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0
Certificate serial: 010D0C9F43285848D4DB903D50AC790319AC4A80
Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/349d3b72-a194-37a3-95c4-97b0c3e9f593.roa
Signing time: Mon 10 Feb 2025 02:00:38 +0000
ROA not before: Mon 10 Feb 2025 02:00:38 +0000
ROA not after: Sun 11 May 2025 01:00:38 +0000
asID: 81
IP address blocks: 152.30.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d4:db:90:3d:50:ac:79:03:19:ac:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0
Validity
Not Before: Feb 10 02:00:38 2025 GMT
Not After : May 11 01:00:38 2025 GMT
Subject: CN=3548a529-d623-408d-afe4-ae246ae66b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a4:71:18:5b:1c:6a:de:d8:f9:96:ac:45:ed:
c0:7e:dc:88:63:cc:5a:bc:2a:7f:f1:39:92:20:8d:
e5:04:67:c2:7a:88:e2:af:6a:61:54:56:c9:51:8f:
df:ef:0d:35:8b:8b:91:94:1d:68:99:2c:0b:c8:1a:
48:80:e2:dd:bb:ae:a4:da:ce:ab:d9:bd:e0:5b:ea:
af:b0:58:38:8b:37:44:45:41:4b:1e:4d:cf:71:3c:
84:18:13:bb:d8:35:4d:5a:34:5a:a5:4d:0a:43:a0:
fc:96:0a:cf:7c:48:36:5c:6d:b4:d0:03:f6:53:a7:
32:eb:a9:33:e1:1b:66:17:87:ec:a7:0f:b4:ba:08:
d9:92:04:00:34:16:c7:a9:cc:62:11:38:7c:2b:de:
8c:57:b1:17:5b:b5:d8:25:3e:5f:02:51:49:ef:23:
24:e9:c7:7f:f4:fd:9f:cc:a1:ae:b8:97:db:e7:d6:
ef:7b:36:67:d9:ea:3f:32:13:9d:45:2a:0f:d1:8c:
e2:8b:2d:3f:3d:d0:e6:01:fc:1d:8b:f7:97:8e:a8:
cb:56:0a:fb:e9:3e:d7:ab:6d:0a:08:00:6c:26:b0:
4f:4d:c7:56:63:0c:09:81:a7:a6:22:6a:25:11:a4:
7b:af:ca:6d:39:68:ee:ed:2c:92:5d:b6:ed:fe:99:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:95:E2:4B:3E:40:3C:C7:57:E9:8F:A0:61:78:FE:F4:95:D5:6E:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/349d3b72-a194-37a3-95c4-97b0c3e9f593.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl
X509v3 Authority Key Identifier:
keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
sbgp-ipAddrBlock: critical
IPv4:
152.30.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:e1:39:68:f3:e8:58:1d:e2:78:dc:6b:63:c0:9a:38:f5:5b:
37:00:5e:cf:94:c2:85:56:8d:bd:e1:50:4b:34:e3:3c:f4:f6:
2c:c1:f0:cc:89:f7:60:cb:d2:f8:02:81:99:6a:1c:43:3b:9f:
bc:87:e8:15:52:ae:6d:4a:04:46:99:67:b8:5a:02:0d:7b:34:
16:1d:15:f5:6a:1d:3a:7e:8a:15:4b:4b:2d:f7:90:c8:23:f2:
31:b0:c6:6a:c1:d1:d9:57:33:cd:8e:fe:93:18:89:d6:6c:9b:
7c:60:b9:82:8b:54:0b:48:0e:23:17:d4:62:1f:a1:eb:e4:e1:
f4:7b:d9:c9:c5:6e:a4:07:bf:83:6a:66:7b:dd:96:f4:88:00:
2d:df:8e:6d:8c:97:8f:ce:64:ea:b2:f5:06:dc:19:88:43:e0:
3c:76:4c:01:dd:55:de:29:00:b5:42:01:b4:7f:eb:30:0e:3b:
f8:56:ac:ea:4f:c2:f1:41:b9:21:6c:a3:78:15:50:4a:44:51:
87:86:19:68:47:0d:3f:5b:cd:27:96:77:69:21:c6:ce:da:49:
6f:5a:3f:4d:4b:3f:da:75:bd:94:c9:ec:4a:8b:d5:1b:cc:a8:
ab:90:47:a1:2e:35:87:12:94:61:c3:c6:a3:45:0c:92:86:5d:
83:42:61:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:14 2025 by rpki-client on console.sobornost.net