Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa
File: f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa (raw, json)
Hash identifier: xGfR3wSN8hlsiIwKLIZWKaLsIC40Vn/x3GGYtRGWJgE=
Subject key identifier: C1:ED:85:E1:6A:97:A2:75:09:83:F5:35:50:93:FE:07:5E:C9:A3:A1
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150D238EE4E22F48FFD1F80
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 213122
IP address blocks: 170.39.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d2:38:ee:4e:22:f4:8f:fd:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=b63928f0-81d4-45df-b3a7-b4b01de0b47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:d0:04:41:08:05:6d:a7:50:e2:70:c6:db:
83:89:db:76:7a:dc:08:b2:9c:14:d3:a1:5f:ad:ac:
a7:11:c1:24:31:6f:49:42:c1:81:4a:81:bb:07:d0:
35:ae:aa:f5:04:83:53:52:22:e5:ae:31:68:50:0b:
8b:9e:16:a2:d1:40:ff:8e:86:41:73:fe:1f:07:4f:
ea:36:2d:38:d2:39:19:f1:52:62:0f:d0:c8:6a:c0:
99:d4:de:5d:6b:85:dd:65:84:70:85:20:2f:4d:b8:
86:20:81:2e:24:36:c7:d2:27:a5:fa:c4:65:09:7a:
fb:74:76:2b:01:c3:e8:92:eb:d2:3f:4d:43:90:eb:
6d:18:29:9f:38:3d:5c:fb:46:89:7b:17:0b:a7:9e:
f6:0b:c0:9d:0d:a4:03:ba:5e:93:c1:20:cd:5b:85:
49:dc:4c:01:9e:a0:72:ab:be:f8:3b:f2:44:7f:84:
af:62:8b:53:40:54:c9:c3:6e:bc:bd:20:c1:82:bb:
3b:b6:aa:b5:7f:e2:2d:22:cb:d9:e9:c4:87:69:4b:
85:37:28:61:11:e1:ee:b8:6e:6a:47:da:54:06:7f:
34:f1:8e:f2:ca:95:c3:45:6b:c1:00:7d:2d:d6:61:
d6:78:11:94:77:19:11:a9:12:e2:fc:a2:a5:52:e8:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:ED:85:E1:6A:97:A2:75:09:83:F5:35:50:93:FE:07:5E:C9:A3:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:cd:b0:80:48:27:27:73:c9:0b:34:9c:fd:ad:5c:3a:5f:6f:
0f:08:17:79:b7:89:64:a3:e9:31:6e:c9:5e:a2:d1:b7:63:c4:
bb:77:de:d1:ef:92:3b:27:27:43:4b:0d:0e:fa:e5:1b:57:d1:
fb:40:38:36:b9:3c:95:00:d5:fa:bb:7b:24:5e:3e:09:a3:28:
67:b3:91:31:cb:f2:c0:78:cb:9a:60:0d:85:b9:9d:75:c3:72:
14:75:44:ec:c3:de:3d:09:e9:25:83:38:14:31:54:b0:a8:cd:
e2:41:69:3a:23:65:9d:ec:5d:3a:3c:3b:c2:db:3b:c1:d8:bc:
a4:c2:9f:52:f1:58:50:99:0c:cd:7e:45:49:24:75:9a:5d:a6:
86:47:33:0f:21:76:79:e9:19:50:dc:e1:a2:35:11:a7:61:7d:
fc:6d:27:53:ce:8f:65:a3:eb:d2:30:2f:46:9c:8b:72:39:9b:
2b:d4:84:5c:3c:7f:c3:e5:0c:92:dd:f4:8a:37:41:b3:58:11:
ed:78:f0:42:0b:1e:c7:d1:5a:c5:cf:de:59:e2:be:63:a7:16:
e1:dd:f5:44:52:d7:03:df:3f:eb:ce:b2:2e:ef:87:1f:31:59:
4d:ee:07:64:9a:3b:42:0c:f8:80:36:44:ff:ea:bf:c3:1b:42:
0b:aa:0f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:16 2025 by rpki-client on console.sobornost.net