Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa
File: 0793e06c-647d-3a3a-a20c-4a207460adb8.roa (raw, json)
Hash identifier: ybOEYKfRT1YNUo6QUtBgyAu2fxH/TwWyM+TWlZRwWGo=
Subject key identifier: 26:7D:BE:CB:76:C0:2B:8F:85:F4:3B:B3:67:CF:0F:69:92:F1:41:F9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5816D3FAA2FEAB691061180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 172.253.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:6d:3f:aa:2f:ea:b6:91:06:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=7d53b78a-cbb8-4d6a-ad5d-e487deadabc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6b:d2:5a:29:50:f3:db:25:56:10:fb:19:a7:
2f:10:8e:40:33:72:26:2e:7d:ca:e2:2a:50:64:e3:
82:6d:3a:b2:b1:c7:3b:91:6d:b3:68:0e:fb:4b:98:
de:1c:fa:c7:d4:de:58:c7:4c:7b:24:7d:44:c8:52:
31:57:b1:03:75:cc:cf:cd:c4:e0:20:ff:21:04:bc:
2b:e1:3b:c3:a6:9e:72:a4:e8:29:87:ae:32:73:72:
85:05:d8:13:c2:86:67:d9:5a:71:6e:13:15:17:86:
c1:c5:8e:77:c4:06:7b:2e:da:f8:b5:f9:6d:b5:b1:
4e:57:bd:ce:20:46:2e:4b:98:bd:83:46:d6:f0:d7:
92:24:b0:3d:e3:09:7f:a0:61:58:64:4e:df:60:43:
d8:68:e8:70:0d:71:1a:e4:8d:bd:54:c3:bd:01:90:
99:92:a1:3f:af:2e:b2:7a:71:7f:26:12:45:69:5e:
40:b1:76:a3:3b:f4:c9:ee:ae:d1:c0:59:9e:76:3e:
a7:e9:0a:9e:04:23:08:e1:6e:aa:c2:62:b4:b1:5f:
82:b3:5f:36:18:e3:09:be:ba:61:46:a0:9a:8b:3d:
c6:26:f4:18:dc:de:b4:0f:a3:48:0d:49:fd:b7:cd:
89:4f:55:f6:b2:36:d9:be:c9:a2:17:75:38:c3:a8:
db:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7D:BE:CB:76:C0:2B:8F:85:F4:3B:B3:67:CF:0F:69:92:F1:41:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:55:98:81:d0:42:a0:be:a4:30:b9:ce:0e:af:b9:7c:4f:61:
26:26:34:ae:79:0a:3a:d1:b4:26:f3:c3:b0:a9:28:f7:20:16:
40:60:5e:cc:11:5a:c3:a8:8e:f1:26:91:43:1d:82:82:45:51:
61:1b:f2:c9:ad:ea:e0:43:35:34:73:62:39:1f:83:40:3c:b0:
42:93:96:cb:54:37:ab:67:c9:4b:ec:01:0d:ec:95:07:8f:23:
36:66:ff:6b:9c:15:cb:2d:74:b2:9f:15:6a:97:89:3f:ff:7d:
d1:1c:4c:4e:3a:bd:c0:c8:77:a0:11:5f:91:0f:f3:58:5f:b2:
83:3d:35:b6:a5:c8:54:75:4a:e7:c6:e3:53:0d:88:99:99:ca:
2f:61:9e:da:44:45:e3:af:ab:00:cf:70:f1:10:b0:6b:d1:de:
86:a9:a3:14:da:e6:f1:aa:a5:4b:ce:8d:a9:cc:88:de:c7:83:
e3:b1:25:3e:52:0c:30:06:ce:4c:03:c3:b2:8e:6e:4a:fa:df:
10:dc:39:1d:28:74:d8:40:70:9c:17:ae:9e:2a:0b:5d:0d:64:
8d:93:57:3c:4a:c6:a3:0d:78:e0:f7:2f:db:a2:2a:f9:34:91:
a3:02:0d:2b:61:7d:e6:20:7e:87:0e:2c:aa:6a:c1:ba:89:4e:
22:d7:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:01 2025 by rpki-client on console.sobornost.net