Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa
File: 01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa (raw, json)
Hash identifier: n53nHggo46zNlFXP7E1K8jcyBzDOopQ0EEvZCuXpjOs=
Subject key identifier: D3:5B:5D:B8:0F:07:1F:B2:DD:12:54:DC:37:25:17:A4:7E:82:D1:C6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5822C4476F3EC49FD51DA80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 172.253.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:2c:44:76:f3:ec:49:fd:51:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=0f0fac1e-ba5f-42ed-bf68-c48debcfa3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:f4:01:d3:c2:d8:b1:17:8c:c5:0d:fd:f1:
16:b2:ba:55:1a:86:9d:e3:e8:c9:06:30:91:5e:e6:
84:3a:1b:12:e1:73:ac:99:c8:73:00:8c:7d:16:03:
8e:11:7d:ea:77:10:2d:79:26:7c:86:e8:86:16:72:
3d:2a:08:c8:95:74:ad:73:d9:50:48:8b:d5:d3:67:
9d:24:fe:b5:70:2b:4a:df:c0:5f:9a:df:63:1e:46:
59:91:ce:41:41:58:3c:c8:7d:7b:a0:77:45:ac:d9:
64:30:dc:75:6d:72:3d:22:36:ee:fb:0b:59:ec:48:
8d:98:cf:84:fd:11:e2:87:99:6a:bc:0e:29:d1:3f:
dd:bb:d6:89:74:61:0a:60:92:4b:e0:8f:40:0f:d1:
89:ce:0b:39:f8:10:59:9f:5a:fa:bc:0d:10:31:7f:
91:e1:f8:37:f4:6d:40:90:93:d1:11:98:6e:45:ee:
d5:97:38:7a:62:b1:5a:81:cd:61:9c:c7:3c:64:e6:
3c:e9:2e:98:ea:0f:fa:ef:22:dd:20:85:51:c8:20:
2c:a1:e4:c9:2d:f1:a7:f6:3f:5e:45:48:ef:5d:14:
ce:68:83:dd:06:bc:67:bf:b3:17:e2:2b:d6:31:2e:
40:60:4c:43:d6:64:00:a0:ed:95:4e:b1:6f:02:f0:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5B:5D:B8:0F:07:1F:B2:DD:12:54:DC:37:25:17:A4:7E:82:D1:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:c4:5d:61:00:d3:d4:07:49:6c:c9:3a:83:76:3b:9e:1e:f2:
d5:c3:43:3e:f0:bb:71:e2:d4:20:d1:52:05:fd:da:6b:75:91:
24:37:b8:dc:ba:83:a3:e1:a7:6d:78:9d:8e:94:35:47:66:af:
2a:a7:c9:b0:fe:40:c6:0c:4c:0a:83:07:ea:eb:b8:e8:23:b1:
08:c9:7b:7c:9b:b4:18:db:e2:e9:c9:30:4f:24:d0:28:fa:78:
d8:eb:42:65:d7:22:65:f1:0c:86:22:d3:30:32:c9:96:47:9d:
65:b7:cc:53:57:12:11:6e:8c:d2:69:64:85:fe:73:f8:f6:ab:
d2:70:c4:b0:8f:d4:1b:69:0b:47:c7:4f:c9:48:d0:b6:71:1d:
12:f0:2d:08:a6:97:0d:07:6e:83:e3:39:26:5a:6a:f4:b3:1c:
b4:21:2c:fa:55:06:68:19:5b:d5:66:ef:bb:49:fb:ab:93:1b:
b8:2f:1b:41:37:35:23:19:8a:6f:46:6b:9a:89:75:9d:21:e4:
ad:4a:03:42:72:d9:5a:a2:a1:86:1f:59:27:cc:8f:a2:a8:0b:
83:4b:25:27:b8:54:72:bf:91:3a:7d:7e:98:a1:f1:52:0f:f4:
eb:fa:98:13:d0:93:1b:2a:60:96:8f:e4:58:16:03:00:ab:c7:
b8:31:77:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:01 2025 by rpki-client on console.sobornost.net