Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/c8268689-1fbe-3c42-bbd4-3c7130784661.roa
File: c8268689-1fbe-3c42-bbd4-3c7130784661.roa (raw, json)
Hash identifier: 7NuqcJNoN+rYvbqIUMF+RWsSGI+qDEa4tAUDKSofhCI=
Subject key identifier: 47:E8:50:07:44:E0:6F:86:E9:57:47:97:49:AF:E1:D2:CF:9D:DE:02
Certificate issuer: /CN=d770c5cf-d883-43bc-a72e-4ae7f90d4900
Certificate serial: 010D0C9F43285848F926A7545A37A6F985DFD1C0
Authority key identifier: 7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/c8268689-1fbe-3c42-bbd4-3c7130784661.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 611
IP address blocks: 142.17.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a7:54:5a:37:a6:f9:85:df:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d770c5cf-d883-43bc-a72e-4ae7f90d4900
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=3ea065b3-c781-49cd-8be3-4a1752599f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:71:75:53:33:ab:2a:73:61:0c:a7:fa:27:
0e:85:03:e7:0a:3a:51:79:5b:11:f4:6a:ff:a8:92:
af:4a:10:ed:52:bf:62:99:d7:2a:56:ef:24:f9:07:
84:41:7a:5d:eb:92:26:b7:c5:25:21:87:64:49:ac:
3f:f3:f7:59:ea:32:7b:cb:3c:2d:32:f0:d9:bd:3e:
e7:ce:76:33:a3:9f:95:d7:82:d2:ab:49:a0:97:4e:
86:60:c4:a9:c7:af:6d:25:27:b2:90:ee:cb:55:ef:
cf:fc:74:76:24:b7:c7:d6:10:8f:a2:5f:48:f2:cb:
5b:53:86:d4:15:5c:3f:51:00:ae:ad:c2:cc:a7:29:
66:f5:3a:6b:47:97:29:04:b5:b6:4e:87:cc:ce:50:
ff:48:29:4f:1c:79:17:63:42:14:03:ee:ea:4c:b7:
68:54:5b:22:43:f8:f9:d7:29:d3:ff:93:db:0d:10:
43:b5:10:63:a8:cb:1b:86:2a:a8:15:ff:11:9f:0d:
7a:f9:05:a9:3c:b5:8c:4d:f4:0f:eb:82:dc:77:c7:
35:2c:67:72:78:5f:e5:de:e1:c0:30:fa:bd:a5:b8:
4e:0e:87:a0:28:be:e1:6d:12:e1:81:cf:40:2d:3e:
5b:f9:a4:ca:09:d9:30:0a:70:2e:c6:f0:0e:d3:01:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E8:50:07:44:E0:6F:86:E9:57:47:97:49:AF:E1:D2:CF:9D:DE:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/c8268689-1fbe-3c42-bbd4-3c7130784661.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.crl
X509v3 Authority Key Identifier:
keyid:7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer
sbgp-ipAddrBlock: critical
IPv4:
142.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:09:f7:9a:be:ec:6e:10:dc:2a:28:dc:82:d6:4e:93:74:02:
09:0e:04:45:bf:2e:1d:11:80:1a:6d:b2:6b:22:81:fb:cb:88:
b1:a1:23:62:b0:54:9b:3c:75:c3:47:b9:52:d3:da:f1:a8:37:
c2:6c:3c:27:dd:5e:50:9e:83:a6:b2:98:a8:8f:b0:50:5e:12:
3e:0c:2e:64:a6:d5:55:7f:59:34:1a:25:b7:a1:f6:6d:1a:58:
8f:80:ea:22:79:63:d4:67:87:99:df:8c:db:bd:c8:70:75:15:
fd:2e:82:7e:df:93:b0:bb:92:7d:c6:fb:ce:48:c7:59:db:62:
40:50:83:56:37:7a:b5:7c:cd:84:87:ec:cf:e9:b9:2f:20:92:
ef:b8:dc:6f:c7:f6:dc:a8:08:24:26:24:23:59:e7:cc:8f:85:
d2:d3:49:a0:73:78:4a:94:ef:d9:9e:9e:ee:95:8f:a0:cd:c4:
e1:71:ff:74:af:fd:8b:a7:3a:d1:21:e5:ec:3c:69:c4:5a:ee:
04:6c:7c:e0:b9:8f:f7:7d:70:7c:f9:cc:1e:ae:a8:0d:f3:a6:
9c:7e:40:ca:32:f3:70:7d:0e:78:e6:ac:17:1a:dd:2c:a6:a9:
f5:e1:d3:83:09:f4:55:23:9b:f2:d5:3c:89:19:9c:9e:d9:be:
bc:19:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:38 2025 by rpki-client on console.sobornost.net