Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa
File: 00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa (raw, json)
Hash identifier: qDChkULkd99odd8MOjJBEb4jiT3BBe/jKpJLAiTE0hc=
Subject key identifier: DC:B0:35:6E:6F:34:6C:24:63:DD:8F:AA:4D:3C:1C:62:BF:D9:24:F7
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285848BBBB73C704C26CE1D1FC4E80
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 394437
IP address blocks: 72.20.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:73:c7:04:c2:6c:e1:d1:fc:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=84d98012-73b9-46b2-8d87-7f43ee8e9a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:59:46:fc:7c:7a:3d:73:02:ab:09:9b:92:
88:02:03:bb:d2:c0:e0:d8:23:a0:1d:a7:52:11:f9:
51:70:2d:81:a5:f8:01:17:4c:07:e8:34:ab:d5:60:
73:94:89:62:31:07:28:e2:bb:4a:62:d0:cf:44:e1:
1b:d0:ec:39:f2:9a:36:00:70:1f:9f:72:b4:98:09:
c9:53:7d:8f:a0:aa:9a:99:bb:a1:50:c5:41:b9:ad:
50:6e:cf:93:48:da:89:07:0e:fa:1e:10:7d:10:b8:
99:ec:5c:02:32:ec:09:49:44:c5:f7:94:cf:81:63:
bb:37:03:fe:81:c1:63:94:75:64:21:08:14:58:bb:
5e:63:fa:1f:4b:94:06:65:24:7d:19:9d:20:c6:b9:
5c:7b:a3:90:06:45:18:c6:a1:f5:11:bc:64:55:e1:
ca:64:6d:1e:23:ff:24:62:16:dc:f6:a5:29:99:65:
36:3b:12:85:25:1d:3d:6f:17:a6:aa:87:89:e3:d5:
d0:8f:9d:4d:ce:a3:fe:93:9d:0c:c3:25:29:57:9c:
20:38:1e:fd:b2:ae:ca:11:b9:ce:2f:38:e7:78:56:
89:f4:b9:21:67:b0:82:ac:79:19:b0:d9:5d:6a:75:
35:a3:38:6c:da:2a:75:24:34:a5:97:dc:9a:ad:43:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B0:35:6E:6F:34:6C:24:63:DD:8F:AA:4D:3C:1C:62:BF:D9:24:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:2f:ea:3e:1b:d1:13:ee:c5:13:4c:fd:c5:dc:d8:e9:d4:1f:
91:62:a4:52:5f:1e:54:05:aa:ef:32:65:28:56:86:2a:38:2a:
b9:91:a7:68:0d:d5:15:41:66:4c:42:22:36:61:c2:0f:a9:98:
22:dc:51:a8:33:b6:bb:d5:7d:30:1a:8b:5f:42:2e:91:0f:c0:
34:af:e8:f9:6f:7d:6e:8f:51:03:0e:57:d8:ec:c4:78:3c:c8:
be:c8:d9:40:8b:b1:cb:0b:c8:36:b5:c1:f7:02:6a:0c:8a:6d:
6d:78:da:c7:66:89:4f:58:ee:6d:14:29:2c:be:85:62:b7:18:
76:85:e8:0e:11:fb:98:58:f6:94:07:ba:4c:e5:3f:45:10:c2:
0b:98:6d:56:58:a9:a4:72:87:cc:00:29:cf:6d:7e:ba:bc:0a:
7a:ad:be:f1:d0:42:05:f5:0f:67:b8:11:13:50:4d:b5:65:e5:
9c:57:1d:65:81:a0:66:c0:b3:90:54:b9:2e:21:2d:f8:f4:17:
00:d5:32:d8:42:36:15:bc:37:e7:a6:ec:61:d6:32:1b:62:2e:
e5:70:38:8f:14:41:44:a3:8d:ee:62:6e:c4:b6:be:41:53:84:
d3:b6:cd:46:88:13:62:b7:75:1f:dc:aa:52:90:d4:c6:ed:d3:
b6:4c:bc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:28 2025 by rpki-client on console.sobornost.net