Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa
File: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (raw, json)
Hash identifier: CXm+cZ57dfz91e1YUtBiDPxBldaUIn+OO8bNHHxloeA=
Subject key identifier: 4F:29:C3:7E:DE:D5:9D:34:7A:43:2C:88:AD:65:C8:E9:57:2E:3A:D0
Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452
Certificate serial: 010D0C9F43285848B8F0CED19F489B2EB3677B80
Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 32854
IP address blocks: 169.197.172.0/24 maxlen: 24
169.197.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:ce:d1:9f:48:9b:2e:b3:67:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=954b2e7f-d177-4542-9a12-9afb61abf13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:0d:82:5f:38:fe:1c:23:71:21:be:fb:c4:
49:8f:7d:0a:58:36:5a:bc:e1:b5:1a:86:6e:04:8f:
ce:84:d2:d4:d1:bb:33:70:13:1f:75:f1:2d:1c:c0:
ac:13:4c:e6:4c:a4:fe:89:e4:b3:59:bd:94:fc:09:
55:ee:e5:a1:a6:76:02:94:68:aa:7b:42:96:69:19:
8b:62:d3:5e:05:e2:90:a5:be:3b:a6:94:b6:22:d3:
0e:97:9b:57:f4:05:40:de:a0:28:c8:3a:1e:1b:5c:
d1:0d:d8:14:c4:6d:6c:a8:cf:d4:0a:cd:e6:16:97:
eb:ab:ac:07:52:bd:fd:76:42:98:6a:8e:10:99:86:
ba:f0:3b:38:11:b7:78:5b:fa:1e:03:67:9a:cb:5b:
fe:94:28:c7:69:c3:98:b4:9b:3f:83:d3:1b:10:99:
d8:ea:6c:a6:89:d1:78:45:dd:42:f7:3d:5d:c6:e2:
7e:cc:f1:cd:8e:b4:f3:29:8e:27:ec:27:ef:37:28:
60:eb:8b:5b:62:38:f8:c2:74:7b:20:ff:86:7e:60:
5f:13:77:4b:3a:99:ab:e5:94:1a:1a:ce:0e:09:b8:
10:e4:2b:df:44:27:a7:9c:c9:4c:ef:31:0d:5a:fb:
a5:71:d9:94:38:f5:c0:1c:a9:19:b1:ae:a6:83:b5:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:29:C3:7E:DE:D5:9D:34:7A:43:2C:88:AD:65:C8:E9:57:2E:3A:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl
X509v3 Authority Key Identifier:
keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer
sbgp-ipAddrBlock: critical
IPv4:
169.197.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:d2:29:57:84:49:4b:0e:01:1d:22:8c:98:9b:da:98:a7:fe:
53:77:3b:8f:3e:6b:3d:e3:f0:5b:1f:ac:c9:9e:cb:8b:78:67:
dc:58:c4:a7:05:b4:a3:25:89:27:42:96:fc:85:aa:fd:fb:16:
b6:c1:37:2e:88:d8:4c:29:7d:60:24:96:2c:a1:16:02:a5:20:
08:76:e5:ec:98:dc:e9:34:99:d6:8f:58:fe:c0:49:59:fd:f4:
d5:82:af:49:b9:37:66:09:e6:89:36:d5:67:aa:e2:1d:e5:df:
f1:bd:be:95:8d:38:c0:11:4e:df:b5:f6:83:52:49:9f:4a:35:
87:28:ab:67:f1:d2:7e:3c:0a:7d:29:3a:24:0b:30:81:c5:47:
f5:5e:ab:2b:da:b6:d8:10:6e:a8:ff:e2:6f:be:c0:92:c2:f2:
c2:98:8d:cf:f6:a8:11:fc:65:9d:b1:36:43:8b:40:a7:c5:f4:
c3:06:8a:ad:1f:57:24:04:17:65:21:b6:a6:42:8b:95:52:20:
c0:04:54:9f:ea:8a:0c:eb:64:8e:1c:1c:90:3a:29:3e:4e:0d:
c7:bc:79:54:b0:b9:26:fd:f2:84:ae:ea:9f:df:e7:00:9f:2c:
18:3d:52:1a:3b:30:29:fb:d0:7a:38:e3:59:8e:2c:54:14:cc:
38:58:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:15 2025 by rpki-client on console.sobornost.net