Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa
File: cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa (raw, json)
Hash identifier: Z4icNs9jt3lXB4wZJehRl66vctDfU1T/Z0n1iIQHoR4=
Subject key identifier: 2D:9A:11:AB:BC:4B:7A:40:CA:79:31:9F:54:CD:59:FB:E2:38:D8:52
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F432858494733FD17ECA2EDB8BC9A0100
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 393878
IP address blocks: 170.133.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:fd:17:ec:a2:ed:b8:bc:9a:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=1ba9e301-631b-4300-8ce4-95ae383413ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:9a:ac:b7:6c:38:4f:3f:2c:af:33:58:ad:
92:a9:95:73:bb:98:41:b6:e7:1f:73:d3:c6:3f:ca:
72:cc:7c:24:dd:46:92:bc:7f:65:66:c6:27:36:af:
9e:d8:bf:f3:db:24:67:6f:9c:b8:b4:2d:df:29:7e:
7d:54:50:08:e1:3c:3a:42:de:f7:b4:f2:00:81:02:
5e:6c:b0:98:b5:45:ba:db:76:ff:5b:c4:a3:fd:53:
ce:02:e6:f6:0e:da:f6:27:3f:8b:42:43:b5:b1:bd:
78:44:a7:c2:ee:84:13:6f:5c:af:15:2a:20:f3:6b:
ab:4d:e6:15:1e:22:15:23:11:c2:49:94:18:ae:34:
42:0d:c9:b7:a5:00:88:6a:7c:ac:ba:f5:d4:e2:fa:
03:ee:7e:59:c7:32:e9:eb:29:42:74:b4:d8:82:2d:
80:3c:40:55:15:c6:82:fb:8d:19:6b:52:6a:d5:bc:
03:df:39:c5:3b:2d:0b:13:61:55:a8:2b:5f:92:be:
20:1f:df:3e:3c:ef:e9:68:e3:b3:97:2f:40:f9:d0:
c7:86:17:b0:6c:6c:2c:62:b9:07:a1:06:e1:a2:7e:
ec:4e:26:05:c5:6f:25:be:22:44:59:82:61:d7:9b:
4a:72:92:0a:64:76:4d:a4:ff:3f:6a:f1:6c:fa:be:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9A:11:AB:BC:4B:7A:40:CA:79:31:9F:54:CD:59:FB:E2:38:D8:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cd2611c6-ffc3-3c8d-bb19-a52fc768874c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
170.133.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:3d:f6:e4:51:8a:d0:76:64:e4:83:f9:bd:ce:64:f1:4e:96:
76:65:98:04:b1:73:0b:a1:47:a2:20:32:f4:e6:94:6c:31:ff:
48:1e:1f:d8:ad:82:73:9f:b2:2c:e1:d7:ae:f7:1f:27:16:31:
1e:aa:02:76:99:ad:05:e6:7a:b1:83:31:65:e3:8f:21:ad:4f:
63:7a:bb:ab:28:f7:4e:a5:41:25:c1:7e:7a:10:4d:33:fc:86:
52:09:32:45:3e:d3:60:84:3e:7c:a8:10:0a:56:1e:b2:cf:3d:
39:99:cd:b2:3d:2e:5a:3c:46:b5:55:99:6d:2e:ba:40:b3:a6:
4c:34:33:5a:a2:c2:77:4d:f6:90:8d:66:5a:98:ff:e9:28:f7:
e0:72:10:46:08:20:52:6b:f8:49:78:90:cd:ac:e2:e8:70:3c:
86:f8:3f:fe:ac:87:88:94:6f:14:6c:3e:ab:d0:6f:95:68:c9:
d8:5b:7a:f8:75:3b:1d:34:24:54:b9:ea:a2:79:d4:6c:b8:83:
b2:ca:a0:4e:ed:4f:97:a2:bb:bc:92:c7:d9:47:34:19:b5:d8:
85:51:ba:47:61:d9:34:19:bc:0e:9f:01:3f:42:9a:8a:86:8f:
b8:dc:25:a4:03:0a:dd:fc:6f:0f:0a:c9:a8:94:b1:66:ab:f1:
1d:8e:c2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net