Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b48d9434-68a1-30d3-b7c0-fecc7e76f3e1.roa
File: b48d9434-68a1-30d3-b7c0-fecc7e76f3e1.roa (raw, json)
Hash identifier: AvnpjpP5pR5tf0NhH1qF+tTrRYFnZkMa44Ya2XFWKRs=
Subject key identifier: EF:22:B4:BC:75:C3:86:F7:0E:AE:70:95:DB:A4:E3:0B:BD:CB:29:3C
Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial: 010D0C9F43285849244E81951EB1A67FEEDF3600
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b48d9434-68a1-30d3-b7c0-fecc7e76f3e1.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 170.176.220.0/24 maxlen: 24
170.176.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:81:95:1e:b1:a6:7f:ee:df:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=91137af2-ea2f-45ce-8da2-aa65f2f6993b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:0c:59:38:74:fa:d3:0c:f2:a0:04:20:93:
0c:0f:a3:09:52:a1:71:5a:a5:30:4a:4a:5a:ac:93:
5c:6c:03:0f:ee:f6:16:b5:e4:47:52:31:97:81:47:
c2:73:9b:18:96:09:c2:8f:14:58:c1:94:00:76:65:
4e:11:97:d9:44:e7:c3:70:c0:75:14:fa:66:7b:87:
4f:d3:3e:38:da:9f:ef:93:b1:0e:3e:ac:ae:f6:13:
8e:7e:4b:73:6b:26:84:7b:29:5f:d1:99:a8:fc:a3:
82:9e:61:c6:d4:63:f0:58:d0:20:18:86:24:b3:ab:
90:2d:a1:c0:a3:95:0d:8a:42:a6:bd:39:99:e4:ae:
55:a5:a9:e2:01:88:e1:65:80:27:2b:82:1a:da:bf:
4f:01:3a:56:ac:3d:d9:90:f6:92:bf:3c:67:0b:f0:
c6:e4:a7:41:13:8e:1f:54:e6:8c:27:33:3f:14:a8:
e5:b7:2b:2f:52:91:10:0f:f3:b7:e0:98:54:3b:58:
e2:a5:9e:e0:e6:71:55:21:ba:17:2e:8b:28:d1:7f:
0d:fa:8f:ff:08:74:24:f2:09:09:0f:ba:a0:f3:a2:
6a:59:73:90:ad:4a:0b:c3:b2:f1:87:84:60:c6:2d:
01:3f:68:2f:d1:e9:55:12:30:8f:a4:9b:af:b3:59:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:22:B4:BC:75:C3:86:F7:0E:AE:70:95:DB:A4:E3:0B:BD:CB:29:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b48d9434-68a1-30d3-b7c0-fecc7e76f3e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
X509v3 Authority Key Identifier:
keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:0d:3c:48:5f:e5:4e:37:5d:0a:9b:b3:c6:39:75:88:94:17:
79:91:32:61:b0:13:72:96:82:9d:05:0a:09:1c:6f:f4:4e:f6:
37:fc:5b:90:b9:19:b7:9d:6e:a8:87:f8:d5:06:1f:27:36:89:
b7:a1:8e:ca:1f:f0:ef:36:8d:55:a1:c8:ae:55:06:95:56:37:
ef:96:fd:6f:c4:dd:d7:0a:6c:eb:97:a4:f8:0c:ea:2e:7b:37:
b2:ac:fb:f3:23:d7:84:ad:ec:9f:77:ea:55:b6:7f:7f:bc:bc:
a1:80:44:04:92:82:8c:26:5d:0e:2c:5e:ab:90:d6:7d:46:9e:
4d:86:db:f0:b9:77:45:3f:70:be:3a:55:fc:ec:b9:53:26:9f:
03:b8:3a:aa:b0:6c:cf:08:04:34:40:45:01:80:bd:c3:88:d1:
70:5b:6e:4a:c6:bd:8a:36:7e:6c:5f:b4:6e:7d:a0:31:aa:71:
27:cf:d5:12:43:f1:07:7e:dc:0f:1f:14:ee:99:02:bf:c4:3d:
35:df:da:a1:61:32:a9:f5:ea:4c:bd:11:21:85:82:f2:8c:da:
6a:7b:95:32:e9:18:15:b0:4d:31:e4:a5:44:e4:17:4e:eb:a5:
17:ca:79:c5:12:15:32:f4:cd:82:5d:df:4a:c9:60:3f:a1:54:
4b:dd:85:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:20 2025 by rpki-client on console.sobornost.net