Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa
File: a5a24476-a36b-3ebc-a070-85d57a2a0786.roa (raw, json)
Hash identifier: /QxpCWoEIoFwpUHgCEuX/cPzUeqB6rEbe4Z+4u7C458=
Subject key identifier: 13:2D:83:38:02:64:CD:2E:A0:87:9E:CC:A3:87:6D:F4:CE:8B:B7:63
Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Certificate serial: 010D0C9F43285848F926B07A37EC9E37A765B9E0
Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 6206
IP address blocks: 172.98.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:b0:7a:37:ec:9e:37:a7:65:b9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=1e89862a-82ca-4596-8747-4cc870143e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a2:3d:9e:70:9a:83:cb:b9:24:09:bf:c6:53:
d5:9d:1d:ce:23:d2:38:04:5d:88:cf:d0:1d:b3:9b:
3e:67:4f:71:27:d4:50:1b:dd:64:37:63:12:e0:55:
c7:5e:f5:16:ab:d4:0a:01:5a:b0:76:a0:c2:da:f9:
4e:b5:42:85:8d:a3:6d:1f:3f:1f:fa:5a:19:dd:ac:
27:20:b1:5f:0a:0a:58:7c:ba:dc:48:a2:20:c3:e4:
30:01:bb:aa:cc:90:e0:34:60:6a:25:62:c8:7a:f2:
15:8e:84:ff:a0:61:90:7e:ca:9d:7e:dd:78:75:4e:
b3:ff:8b:67:d6:32:84:22:11:6a:14:91:58:3f:e0:
a4:5f:84:12:30:9b:34:07:0b:0e:03:5f:1b:c4:70:
e9:35:af:06:22:82:ec:f4:42:f0:6f:5b:23:75:ac:
de:4e:25:3c:24:53:70:b5:2c:90:dc:26:f7:94:25:
44:e4:0c:33:19:84:83:8e:f8:1f:7d:8d:f3:68:51:
30:49:f4:f0:ee:03:54:45:53:57:d7:71:15:3a:2a:
85:b9:32:fc:94:0a:53:aa:3c:4b:60:55:69:eb:31:
73:52:ce:1f:19:f1:2b:8f:a7:48:8c:47:99:fe:cf:
8f:b0:03:b3:39:8b:c8:13:a7:35:d2:aa:82:4e:9b:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2D:83:38:02:64:CD:2E:A0:87:9E:CC:A3:87:6D:F4:CE:8B:B7:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl
X509v3 Authority Key Identifier:
keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.34.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:52:0c:e3:3d:67:a7:38:f8:c7:8a:96:b9:14:d2:f2:01:4c:
b2:e8:b7:14:d9:e4:91:f9:59:37:00:7a:b6:8d:2e:cf:0d:31:
3a:e7:4b:b5:8c:f2:32:0f:df:2d:70:43:9c:b5:4e:9b:8c:87:
38:3a:45:d8:56:a2:9b:25:8b:55:8f:f6:99:ce:65:5b:d5:f4:
d8:2d:e0:74:42:bd:8c:13:30:1e:af:c0:20:58:f4:e1:5c:7a:
fb:3b:4a:c2:e9:63:91:17:f6:7c:6f:33:11:52:de:42:be:f5:
29:a2:8f:8b:ba:df:6a:9a:66:53:9a:19:71:6a:4a:f3:02:62:
25:2f:f2:4a:ef:15:6b:ff:10:6a:b1:e2:4f:34:ff:38:77:96:
1a:04:1d:c2:6a:28:4b:57:65:24:06:6d:bc:1f:2d:8f:93:78:
5c:b3:42:c7:cd:73:92:72:27:21:5d:4d:df:95:77:05:5f:2c:
fc:97:6c:91:73:fe:36:11:98:fe:5c:42:97:c9:90:03:7f:0a:
cb:de:bb:d6:e8:50:77:99:15:7f:d2:d9:26:fa:f7:f0:1e:4b:
c2:bf:80:46:11:9d:78:cf:59:27:38:e7:71:a6:ca:0f:8a:d8:
d0:3a:9c:8f:9f:a2:55:10:75:0c:39:a0:35:44:73:0f:44:7f:
e1:99:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:52 2025 by rpki-client on console.sobornost.net