Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa
File: 1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa (raw, json)
Hash identifier: J8NjVK0iPIip8oxXMwVkSHIbP8RKcmIfBWJMABQOdRY=
Subject key identifier: A2:B0:C1:F7:E8:1D:2B:E3:B5:BC:63:01:C9:BC:BA:D3:45:D1:BB:E4
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C58186179B957287FBE32A80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 172.217.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:86:17:9b:95:72:87:fb:e3:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=e92afd3f-c706-4457-bea0-9cac156ab83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:f9:39:f6:ee:17:c7:13:cb:7a:6f:c2:c5:
ce:93:a2:cd:82:0c:37:59:35:04:59:e1:fc:0e:28:
9f:07:63:6c:4f:d8:ab:11:a3:6b:5a:b4:f4:6d:8b:
66:ad:0a:ac:d3:fc:a4:7b:3d:4c:10:60:03:e3:4a:
c9:35:6b:21:34:03:18:87:1c:1a:01:15:d6:99:70:
7a:d1:2e:ec:04:91:9e:a2:b5:2e:b4:26:9e:db:4a:
c9:02:51:c5:49:cb:69:4a:f9:a7:40:99:b4:57:6d:
24:bd:df:ee:84:e2:fd:d4:71:28:f0:1a:99:50:e0:
f1:e8:b2:cc:f9:3b:35:57:b1:c2:25:6d:ec:7c:5a:
10:a4:95:3d:d4:a9:97:d0:b5:06:61:74:4f:ac:b4:
1f:a1:ca:4a:ce:b6:a2:ba:d5:70:56:90:91:fa:a5:
39:70:69:f7:39:6f:f9:99:75:79:98:69:6e:91:df:
a1:67:96:6f:d9:ae:31:8e:c0:cc:77:e4:40:b0:23:
e3:dc:a0:5b:23:6a:ff:6c:94:74:6a:21:32:4b:b2:
04:90:94:7a:ac:1b:a3:fd:8d:72:ba:9a:3d:ae:c1:
d3:c6:77:b0:b8:4a:87:21:2c:f4:a2:23:19:11:cd:
d5:2c:c8:71:cb:9e:df:93:c9:1f:cf:2d:1f:b5:03:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B0:C1:F7:E8:1D:2B:E3:B5:BC:63:01:C9:BC:BA:D3:45:D1:BB:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:67:f1:d2:ce:03:b8:29:d1:fb:6c:ee:85:7b:05:6f:73:e1:
2e:9b:2d:98:f6:d6:31:69:7c:5a:f8:4d:ea:fb:52:c3:f3:83:
a8:6d:d2:97:e7:70:4e:c7:96:8f:ff:a0:99:c3:da:cd:1d:f5:
14:b2:85:2a:6d:55:0d:cd:11:1a:42:d7:a3:5c:1b:35:36:74:
31:74:03:d7:f7:44:d5:db:81:0d:16:c9:6f:1e:b1:f0:74:94:
4b:fe:1d:0d:d5:1b:bc:8e:64:33:a6:26:56:dd:52:4f:b2:4c:
ba:09:37:ea:bc:ac:a3:ab:b3:62:38:3a:4b:4d:9c:86:51:27:
e3:c9:91:e7:8d:76:6d:56:ed:90:75:52:24:f3:eb:f4:2d:6d:
43:6a:c0:c7:c7:fa:14:47:a9:74:13:1d:44:da:e8:25:be:fb:
52:4c:83:06:aa:a1:3a:b6:06:e8:38:5d:a7:cd:1d:02:78:8a:
2e:98:73:f5:df:00:a2:8a:b7:63:8a:fb:19:06:42:dc:65:48:
46:9a:25:1a:46:c3:8d:85:65:cc:e8:0f:44:64:d1:c1:f0:26:
9f:9e:49:85:1a:04:c3:4e:23:91:c1:7f:c8:d9:91:da:96:9d:
9d:c7:34:da:f3:ac:06:4f:69:db:a0:cd:85:65:d5:b1:2f:a2:
2c:ac:d0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:02 2025 by rpki-client on console.sobornost.net