Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/acb98955-4a2b-3667-8035-d27e8de67b7a.roa
File: acb98955-4a2b-3667-8035-d27e8de67b7a.roa (raw, json)
Hash identifier: sXYexdukD8xpVW46irEawjJkh7tqPohEkKlmKhsiuV8=
Subject key identifier: 6E:69:CB:C9:81:55:CF:90:52:6A:01:1D:75:0D:91:CB:E3:74:CE:A9
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285849631EC609215BEECD4B51A800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/acb98955-4a2b-3667-8035-d27e8de67b7a.roa
Signing time: Wed 02 Apr 2025 01:00:46 +0000
ROA not before: Wed 02 Apr 2025 01:00:46 +0000
ROA not after: Tue 01 Jul 2025 01:00:46 +0000
asID: 202
IP address blocks: 170.30.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:63:1e:c6:09:21:5b:ee:cd:4b:51:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Apr 2 01:00:46 2025 GMT
Not After : Jul 1 01:00:46 2025 GMT
Subject: CN=0cdc0c0b-bce3-4e8d-9944-888ff20edbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:90:26:66:81:5f:fb:14:cf:50:0f:96:c9:
a0:e8:ab:e9:20:fc:f1:44:2e:29:e7:eb:c9:91:b6:
7a:ab:44:ba:de:e1:57:b2:19:72:10:c2:40:cf:3f:
5c:ab:03:03:0c:33:b6:05:0a:1e:fa:4e:90:45:fd:
75:73:fb:3b:ff:1f:de:79:01:0b:6f:24:51:e0:10:
fc:31:d8:75:85:a6:5a:02:2b:86:78:a7:46:3f:fc:
f9:47:a2:d1:9d:bd:1f:c2:f9:de:9a:5d:db:6c:b5:
ee:fe:cd:81:10:3d:16:f6:4c:e5:a1:78:5e:83:db:
65:b3:18:15:fa:a5:3a:fc:16:37:1a:1a:e3:a8:e4:
a2:80:5c:f4:c2:02:1c:56:83:b2:05:44:51:47:77:
14:e2:2d:68:f0:37:43:4b:93:f3:97:d5:72:8c:2a:
0d:da:90:d0:55:32:af:9c:f5:9c:fd:b3:4c:c3:64:
54:f1:f8:07:a6:f1:bc:53:31:e7:68:31:92:07:52:
24:02:0f:ed:34:d0:a2:72:88:ea:14:98:0e:78:dd:
19:ac:ef:b8:72:46:8c:88:f6:5b:5f:d4:65:b0:d4:
35:61:f3:42:60:c7:48:3d:a2:2f:71:ab:73:31:e9:
70:59:63:84:42:f4:ba:b7:3d:f6:63:f8:a9:3f:62:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:69:CB:C9:81:55:CF:90:52:6A:01:1D:75:0D:91:CB:E3:74:CE:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/acb98955-4a2b-3667-8035-d27e8de67b7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
170.30.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:c6:85:d8:d6:bb:65:84:8e:4a:13:dd:7f:0d:b9:21:90:f2:
b5:8d:e2:12:86:6e:24:71:07:95:1f:01:ac:c5:65:44:71:dd:
8d:71:fd:1a:89:6f:02:30:f7:81:69:92:7a:3e:93:3a:4a:55:
01:5a:b3:2e:78:9e:b8:12:b2:0a:f0:2e:c2:2b:64:48:61:64:
80:20:af:1d:03:17:af:1b:a9:0f:65:34:b6:62:c8:1d:21:3c:
ae:3b:78:59:cf:9c:99:91:7f:68:f3:dd:cb:a9:4a:c6:10:83:
fc:fd:3a:eb:ee:fd:0e:ab:ae:d8:8f:63:9b:9a:40:b4:75:2c:
de:1c:2e:bf:b3:b2:c2:c9:2c:4c:bd:4e:9e:30:8a:ce:60:b1:
ef:b1:db:58:f4:ae:8b:33:63:f9:0d:8f:0c:bc:19:47:ed:07:
bc:cb:0c:5a:66:33:20:f8:b5:b6:e2:5f:2d:b5:3b:63:d4:12:
28:33:0e:08:ac:ad:a2:7c:cc:7c:69:f3:f0:ca:92:5c:db:00:
4b:c5:13:af:ff:1f:3d:42:4b:b3:86:5f:a5:a5:d7:df:8d:40:
54:ec:8c:46:e5:4d:6b:5e:57:f2:87:e5:54:06:bc:d2:46:c3:
81:04:74:43:7a:91:b9:65:63:97:88:a7:56:d9:02:60:81:c5:
65:ea:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:03 2025 by rpki-client on console.sobornost.net