Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa
File: 4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa (raw, json)
Hash identifier: gnhe0CpV6YKtKPj3pIMZz/DtuvxFJvhinDqywf2fNNE=
Subject key identifier: 64:73:2B:FA:43:FC:6D:57:67:6B:BB:5C:89:75:0C:26:DD:2D:DD:90
Certificate issuer: /CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5
Certificate serial: 010D0C9F43285849350EB165833D2CE1787CFA70
Authority key identifier: FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 21743
IP address blocks: 163.123.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:b1:65:83:3d:2c:e1:78:7c:fa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=6b55945d-be07-4c70-99eb-f4a1473d6b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:24:1f:e8:e0:93:8b:0d:d1:7d:54:b3:fa:
c1:98:66:8d:f7:4a:71:52:29:31:d4:2f:dd:2b:65:
1a:2d:dc:ad:33:14:dd:cb:8a:74:d5:6d:9f:f5:c0:
9a:dd:9b:c8:d5:cf:9c:15:b9:99:17:54:97:6e:c2:
9f:4a:99:b8:88:7e:44:33:de:df:3b:59:51:a2:fe:
ec:b3:58:cd:dd:7e:00:e4:60:e7:19:76:20:4a:03:
4a:83:a1:7f:5a:75:11:c3:b4:6c:d5:86:e2:cf:fa:
9d:70:74:be:5a:35:56:65:98:48:86:87:67:00:f0:
e8:69:90:31:bd:ac:c5:c4:e8:9c:e1:c5:94:e9:bf:
09:c0:1b:61:be:80:7c:4a:60:a1:7a:0e:3f:fd:18:
16:c3:fa:5d:d6:99:cc:ad:50:dc:a8:19:76:f4:11:
69:b0:23:1e:93:52:cc:5b:52:db:b4:32:3b:a3:19:
e6:bc:94:c1:11:6d:51:ed:20:5d:42:01:3c:df:91:
dd:54:02:aa:5a:9b:09:ab:fe:d9:73:f6:fb:1e:a1:
16:6b:91:28:ce:4f:c8:a2:72:86:ba:43:04:ad:82:
bc:4f:da:83:96:08:5d:a4:c4:5b:de:c7:bf:9c:50:
6f:df:a6:e3:d2:13:6f:80:d8:62:87:9f:2f:50:88:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:73:2B:FA:43:FC:6D:57:67:6B:BB:5C:89:75:0C:26:DD:2D:DD:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl
X509v3 Authority Key Identifier:
keyid:FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:af:14:64:09:e2:f2:d2:0a:57:42:b6:77:d9:90:7c:c8:cb:
62:39:5f:7e:65:16:92:bd:eb:0c:d1:af:17:45:6e:88:18:0a:
be:33:1d:e2:3d:12:b9:96:35:8f:08:4d:6a:c4:f8:5a:40:7b:
41:53:2b:19:e9:f0:02:e9:4e:c6:92:46:25:d8:ff:be:d7:d9:
37:48:d1:cc:7d:5a:01:67:16:44:e4:bd:37:40:ff:9c:f8:bb:
af:ad:63:d7:76:b5:38:c9:32:e9:b7:6f:ed:f3:6c:7e:c6:17:
b1:07:30:c6:1e:b1:8d:cc:1f:b4:09:26:20:5c:4f:94:2e:3d:
e0:d5:29:6c:56:23:28:73:26:c8:9e:a9:76:56:5f:ae:79:b9:
d2:bc:9d:4a:97:ec:22:bd:ce:1a:3d:dd:16:3c:3d:7b:04:e4:
37:71:99:e5:23:24:be:ef:b2:9d:3b:6e:c7:8d:2a:d7:2e:bb:
98:64:de:e4:07:7b:3b:36:cb:80:03:1a:6e:df:e8:b9:ac:6d:
c9:5c:48:4c:c8:ae:d8:e3:b9:e9:13:f4:5b:3a:2f:cd:82:62:
ef:66:5d:97:05:2d:b3:ac:f1:8e:02:02:e8:a9:7b:f9:2f:14:
94:9f:42:e4:c5:df:6a:89:7a:e7:4b:9f:e0:3d:6e:12:c1:90:
53:a9:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:47 2025 by rpki-client on console.sobornost.net