Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3a601ca9-b58f-3bb2-8e61-7532f64000e4.roa
File: 3a601ca9-b58f-3bb2-8e61-7532f64000e4.roa (raw, json)
Hash identifier: qJPNfOryGJpIwKl5yqlNhZdrRT1u1V3QcUnTdwjIjNk=
Subject key identifier: 16:92:01:8C:B1:DA:42:BC:A7:44:FC:28:CC:CD:EE:84:77:48:6D:B8
Certificate issuer: /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial: 010D0C9F432858496FAF144C4B62B403A2AFAFCE
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3a601ca9-b58f-3bb2-8e61-7532f64000e4.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 54994
IP address blocks: 174.35.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:14:4c:4b:62:b4:03:a2:af:af:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=d09596c8-9a05-4ad2-8416-bb7f91d145fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:01:14:3c:2b:68:1d:fd:11:66:bc:15:35:
a2:5c:d2:28:67:f4:b2:38:9e:be:62:10:e3:96:be:
23:91:0d:19:c4:bb:9a:35:12:fb:f3:2a:e6:90:d1:
f1:e1:fa:cf:df:29:84:39:fc:0b:a9:1a:03:e7:c1:
73:b3:f1:d4:c4:d0:ab:19:75:38:f7:8e:7d:25:e8:
b3:bb:e0:3c:05:86:9e:d5:74:f9:7d:72:f7:11:d8:
e1:40:fc:d2:a4:d3:41:a6:d2:dc:88:31:53:6e:23:
e4:8d:19:a2:f3:8a:75:1f:0f:06:af:bd:91:24:77:
f5:b4:81:27:7f:f7:7f:db:5b:5f:a4:46:15:2b:31:
0b:5b:4c:cc:86:b1:ad:c2:e6:65:b7:c3:45:90:12:
32:fa:86:9c:13:71:1c:dd:fc:b1:20:c2:01:6d:42:
9b:dd:06:0a:60:f5:88:e7:d3:6d:45:e8:16:42:eb:
86:c9:34:de:40:9a:75:6a:66:72:d2:22:85:5c:8b:
60:a8:0e:b8:5a:f4:fe:01:e7:78:96:e4:35:b0:1c:
f5:20:f2:12:0c:a4:e3:88:11:ad:ee:63:8e:19:85:
de:c8:aa:95:fe:d9:14:b4:2b:83:cf:2f:4c:9c:ab:
7b:9c:c6:b6:67:8f:18:20:60:b3:c8:b2:43:56:d2:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:01:8C:B1:DA:42:BC:A7:44:FC:28:CC:CD:EE:84:77:48:6D:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3a601ca9-b58f-3bb2-8e61-7532f64000e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
X509v3 Authority Key Identifier:
keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
sbgp-ipAddrBlock: critical
IPv4:
174.35.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:e5:d0:b3:9d:6b:44:b1:e0:17:82:4f:f7:9f:79:46:9e:6c:
e3:05:9c:12:21:20:97:68:8d:99:6e:8d:5f:35:f3:d5:8c:c5:
13:a4:77:6a:e7:ec:f0:f9:fe:85:f1:11:33:bd:51:87:8a:00:
7d:4c:71:24:44:d3:ec:56:05:fc:a1:c5:7d:46:6d:f2:d4:ad:
07:a0:30:bd:7f:73:fd:42:74:02:27:6f:0a:38:6e:c9:47:83:
4d:80:a6:e8:56:84:3f:70:08:4d:5a:46:ab:07:86:82:17:55:
ab:cb:ae:9f:bd:07:38:b8:4a:64:b4:1a:62:42:5e:5e:a0:38:
24:9a:b2:1e:a6:7f:1d:6c:bd:6f:0e:2d:e1:40:ed:a3:bf:bd:
07:1c:6c:c8:7b:84:d1:48:e9:f4:d3:27:13:57:05:20:40:0a:
22:85:7f:03:db:2f:37:d1:98:01:eb:f6:0b:cc:bf:07:b6:8d:
a3:0f:7a:56:b8:d0:f3:06:db:94:04:74:a5:79:6b:ad:8b:07:
c5:d7:ae:41:87:74:ae:51:01:c4:bc:3c:50:fc:88:60:d7:39:
65:e5:a1:c2:5f:2a:6e:f4:6b:b9:eb:45:c9:d9:16:67:a5:85:
41:7e:3a:2a:ce:d4:39:79:cb:91:6b:45:56:d7:69:00:fb:6a:
6c:fb:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:37 2025 by rpki-client on console.sobornost.net