Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa
File: d56026a1-cfac-3474-a6ad-48aea0c9a396.roa (raw, json)
Hash identifier: ZRAYXo/PiFZIVmRAyRcWzBxWBqNXpRXHn2wY+ebGGN8=
Subject key identifier: 3C:7C:E8:D0:5A:67:D4:8F:5D:44:A9:F2:A3:61:94:BB:14:28:EC:90
Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5
Certificate serial: 010D0C9F432858497F09A7CAB2CF38810F098800
Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa
Signing time: Sat 12 Apr 2025 01:00:48 +0000
ROA not before: Sat 12 Apr 2025 01:00:48 +0000
ROA not after: Fri 11 Jul 2025 01:00:48 +0000
asID: 396261
IP address blocks: 128.163.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7f:09:a7:ca:b2:cf:38:81:0f:09:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5
Validity
Not Before: Apr 12 01:00:48 2025 GMT
Not After : Jul 11 01:00:48 2025 GMT
Subject: CN=cbe69138-8011-4600-8c3e-fa339a339aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:4e:53:e8:49:8b:79:d4:f0:db:50:d5:b4:
0b:62:a3:72:cb:e0:b2:27:23:05:cf:10:23:94:d5:
cb:4f:51:64:ef:89:3c:89:d4:fe:58:78:cf:7d:a0:
dd:5c:e0:7a:71:14:fe:1e:40:d0:9b:9f:fe:3e:f2:
d2:91:ab:f5:66:14:f5:03:31:9c:24:c0:36:63:e5:
de:46:85:d1:25:69:cd:c4:cc:ee:9a:46:09:43:d4:
2d:f4:c9:9d:4a:cf:9a:cf:a1:bd:72:b7:85:db:44:
e6:9d:e9:8a:6f:ba:14:d8:ac:8e:fb:43:1c:b6:cc:
b7:90:b8:f9:30:7e:44:73:fe:cb:f7:72:e0:03:07:
bb:90:9f:0f:f0:ae:fd:75:72:27:50:57:4c:42:76:
b6:6f:f2:53:54:fc:52:85:49:96:aa:a9:c7:63:79:
01:fd:6a:dc:bd:72:eb:37:b9:f3:a6:1e:b6:11:0e:
8e:f4:bb:a0:31:4a:c2:d6:8e:a4:98:09:a6:b1:fb:
65:57:73:68:bc:fb:c6:3a:52:33:35:68:37:11:83:
95:d1:83:20:05:32:9a:e0:69:d6:9d:ee:5b:44:8c:
0d:0d:f3:8c:24:d7:6f:63:b1:35:dc:a4:e3:d2:cd:
2a:97:89:fe:8d:05:16:c3:2e:df:d3:14:67:3e:20:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:E8:D0:5A:67:D4:8F:5D:44:A9:F2:A3:61:94:BB:14:28:EC:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d56026a1-cfac-3474-a6ad-48aea0c9a396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl
X509v3 Authority Key Identifier:
keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.163.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:d9:60:4e:73:ec:a3:91:94:0c:1e:17:90:6f:bd:23:31:a3:
2c:b1:f9:94:1e:95:03:0e:fa:a8:0d:b9:91:98:f8:b4:13:c2:
5f:93:68:e9:55:53:12:2e:e6:6b:72:11:e3:75:b0:06:4b:3c:
50:26:1a:fb:67:11:a7:45:27:c3:d0:4d:21:34:37:71:04:15:
d5:38:ba:31:0f:5c:a0:a8:19:e4:92:d7:fb:a6:42:1c:03:4f:
27:b6:5a:14:25:81:a0:d2:53:91:15:b0:5f:20:80:0c:bc:4c:
4a:f4:21:19:91:b0:43:e9:82:68:ac:d7:e9:dc:d9:f0:aa:16:
01:46:a6:7a:a0:91:02:03:3a:56:f5:c7:78:49:6c:7e:e1:ee:
8a:e3:d0:43:d4:fa:dc:a2:e3:ac:6f:c6:02:64:fb:88:ae:65:
a7:05:e4:e8:b5:49:31:b9:fb:ff:63:6f:ee:46:b4:9d:ac:95:
95:00:4a:e9:47:2f:cc:77:f8:49:13:7f:54:b3:2a:b7:ec:c7:
c8:47:fb:48:b4:3d:19:ca:ff:b3:01:7c:5c:b5:8d:32:9b:fe:
04:60:56:ec:9e:e8:e0:5f:39:9c:01:06:a2:8a:3b:bf:85:b9:
73:09:f9:ab:3e:cd:87:e7:49:59:e7:05:1a:e2:be:f1:01:0e:
d6:1c:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:30 2025 by rpki-client on console.sobornost.net