Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19aacf4f-1703-3944-bc49-5c6af5a45de7.roa
File: 19aacf4f-1703-3944-bc49-5c6af5a45de7.roa (raw, json)
Hash identifier: qEp0xrcwxs1sRGC0HA5aWxn5VHSKsr7iFcZYwdgmtmM=
Subject key identifier: C2:3A:69:A6:BB:9F:1A:C1:00:92:13:32:06:4A:27:BD:5B:21:96:28
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285849631EC6F4697236E29E1F3E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19aacf4f-1703-3944-bc49-5c6af5a45de7.roa
Signing time: Wed 02 Apr 2025 01:00:46 +0000
ROA not before: Wed 02 Apr 2025 01:00:46 +0000
ROA not after: Tue 01 Jul 2025 01:00:46 +0000
asID: 3360
IP address blocks: 170.30.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:63:1e:c6:f4:69:72:36:e2:9e:1f:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Apr 2 01:00:46 2025 GMT
Not After : Jul 1 01:00:46 2025 GMT
Subject: CN=4cc0a979-a3c8-4580-8575-30053b7be2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f0:09:0b:8f:d7:c8:ad:61:fc:ea:96:ae:59:
80:4f:13:7f:91:5f:ce:a5:fa:93:77:9a:9a:ff:03:
df:3c:c6:fa:3c:38:a1:0d:28:98:2b:41:5e:f1:70:
05:95:d3:eb:a1:13:07:91:e4:d6:6f:4a:52:5e:19:
03:13:ac:ef:f5:fb:40:49:ca:55:79:5c:52:26:5c:
6f:45:90:a0:fc:71:9a:ae:a0:20:e0:23:08:e6:bd:
1d:be:09:29:7b:6a:8a:34:a5:9f:b5:8c:7d:ad:69:
6f:06:bf:7c:b8:85:2a:7f:44:32:59:07:1f:25:88:
36:0e:61:3c:fc:7b:d7:6d:08:ef:3f:ce:26:3f:e1:
b6:8a:ff:c4:c2:79:59:22:33:93:fc:10:c0:07:4b:
45:ae:0e:ac:bc:bb:d8:c9:38:3f:13:2d:fa:7b:71:
a3:d0:86:b0:bf:db:3d:b4:6c:76:76:51:e7:79:6c:
df:10:f7:52:ea:83:37:36:bf:ba:25:73:64:c8:ff:
a4:67:19:a4:75:71:f1:0d:00:66:fa:22:b2:06:97:
50:ce:f0:cd:4e:a7:90:99:ce:33:f7:44:e1:5b:59:
21:0b:fb:0a:47:79:a8:26:5f:bd:68:e0:f5:75:60:
fd:cc:8c:4c:6a:f9:56:59:d2:33:a0:f3:77:85:75:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3A:69:A6:BB:9F:1A:C1:00:92:13:32:06:4A:27:BD:5B:21:96:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19aacf4f-1703-3944-bc49-5c6af5a45de7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
170.30.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:3e:b3:98:63:d4:47:93:54:6d:44:5d:7e:76:ae:9f:c5:00:
ac:02:1a:28:47:22:aa:1b:66:70:43:5b:18:6f:2d:fa:fd:6a:
50:3c:10:99:de:69:60:e7:1a:25:a1:c9:39:82:23:79:34:bc:
aa:94:fe:9d:ef:96:64:81:1e:98:cf:8b:a9:4a:d0:51:44:ae:
4a:c7:eb:12:b1:7b:c8:e2:ac:77:24:dd:6d:3f:c3:e1:c4:d2:
f0:05:79:17:ec:8c:05:f2:85:06:f1:db:ff:75:67:ce:8e:db:
3f:f9:0c:e8:18:88:30:31:7f:be:e3:b2:b8:0b:06:09:0a:c3:
46:f1:6d:74:6f:1c:3f:a4:70:5e:33:95:49:dc:70:e3:e4:5a:
0d:d8:29:c4:78:3f:a2:fd:09:f4:86:ba:5d:c0:1e:fc:20:4b:
92:7a:55:d1:66:71:f1:cb:2b:51:f9:56:7f:66:9d:61:f9:6c:
dc:f8:da:5a:d0:d3:02:04:b9:cb:bd:13:53:c8:ad:e6:a8:79:
dd:fd:55:0e:67:12:69:f1:c4:c0:13:fe:c2:58:1b:bf:21:27:
84:9d:2d:30:1f:da:f9:b0:57:7e:6e:8d:1e:f7:33:83:9e:fe:
ce:e0:b7:51:c3:22:c7:e4:37:7f:c2:5b:aa:dd:69:0a:79:93:
9b:c0:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:00 2025 by rpki-client on console.sobornost.net