Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa
File: 8d352a99-b26f-325a-8066-4e236b1102a1.roa (raw, json)
Hash identifier: 5Rhr/XzUAE4eEWjHxL+ZibAh5P8lqt/7BJYfhQI/ya8=
Subject key identifier: E4:3D:83:71:1F:AE:05:17:2A:E7:86:4F:0C:B9:FF:C1:60:99:47:B8
Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
Certificate serial: 010D0C9F43285848BD20E5180E309CD834590D00
Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 134365
IP address blocks: 172.98.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e5:18:0e:30:9c:d8:34:59:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=de131d88-d8ca-4a67-b4b0-07ba1c92a12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0f:b2:86:6b:86:8a:15:7e:32:8d:1b:86:b7:
c7:12:2a:f9:c0:22:f2:b7:7b:e6:79:f5:71:93:cc:
b8:dc:7b:03:92:79:99:74:ea:64:21:83:62:45:96:
e6:b4:47:73:74:1b:6f:a5:8d:55:cf:00:aa:4b:a6:
1c:0d:2b:03:a7:a1:88:ee:94:a1:ae:42:b8:39:c1:
4a:0d:3f:aa:33:3f:0e:3b:d3:84:bc:00:7e:02:2e:
fb:67:c8:44:79:27:61:5b:dc:9f:b1:34:5a:2c:2b:
aa:ed:de:c9:49:67:77:69:51:fc:c3:0b:bb:08:f9:
e4:0c:9f:b4:0f:c4:03:3b:6c:23:59:12:ae:be:9a:
2d:f1:3f:41:99:a9:bf:6e:03:f7:9a:34:8e:5c:70:
01:de:9b:ed:c9:b7:c8:40:da:85:7c:f8:34:76:fb:
63:3b:10:34:5f:45:3a:43:fb:8d:36:79:1c:8e:51:
ae:55:32:31:09:d9:5b:58:fa:ae:66:04:9e:96:b5:
88:f7:8b:23:17:95:91:e6:aa:68:bd:86:5d:03:a9:
75:1e:9b:f7:eb:85:8d:3c:9f:22:6d:d7:00:e5:45:
8e:b9:d1:c5:3f:3d:90:f3:55:38:33:e6:1e:c2:5d:
72:70:c6:6e:38:f4:cf:84:a8:fe:3e:0b:48:78:08:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:83:71:1F:AE:05:17:2A:E7:86:4F:0C:B9:FF:C1:60:99:47:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/8d352a99-b26f-325a-8066-4e236b1102a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl
X509v3 Authority Key Identifier:
keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:3e:60:a9:d0:73:35:5c:7c:57:28:a3:81:2d:30:f9:aa:87:
9c:3a:c5:06:52:09:00:a1:c6:a0:c0:66:7d:e3:28:72:a4:fe:
a6:d4:6f:92:e2:a5:18:44:15:45:f8:40:30:1d:d8:8c:ec:9e:
12:4a:95:b1:52:0c:88:1b:5c:d6:4c:57:a1:4e:bf:66:9a:cb:
d9:6f:4e:d6:ee:98:d9:84:a9:a7:0e:d6:c6:a1:f9:01:4b:11:
1a:60:3f:d5:5c:1a:20:50:4a:17:cd:0c:25:24:6a:24:97:b8:
b3:98:18:c9:b3:33:84:8f:83:3e:8d:08:c2:7b:6a:64:98:2d:
d3:b6:78:90:b2:31:e5:7b:cf:4f:1f:dc:50:1c:c9:ab:d6:92:
1a:aa:43:d2:f3:ab:e2:86:07:af:1d:96:37:fb:67:35:a7:25:
f3:d7:fe:9f:61:2a:97:cd:1f:38:04:20:3b:31:49:f3:96:ee:
7b:17:f1:30:08:63:be:74:46:01:25:8a:5e:89:bd:c7:0e:d2:
42:58:5b:be:6e:f7:28:f5:85:13:df:46:fc:2c:ea:d3:78:b5:
c0:30:da:ec:b5:1c:5a:c2:9b:66:b7:24:f7:60:15:7a:93:88:
a7:bb:ce:45:aa:9f:59:3e:55:0e:45:64:72:0f:6c:69:3c:1a:
53:73:3f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:23 2025 by rpki-client on console.sobornost.net