Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa
File: c77f172a-1df8-31ea-92f6-569d849ec8b9.roa (raw, json)
Hash identifier: v8Bnw3UVpxC5R5I6hjjTlbeP+JlKb3xZi/KeKjka6bs=
Subject key identifier: 0C:26:B4:E3:0C:3F:28:BE:34:62:99:EE:58:78:A8:66:68:2D:85:D8
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C581882232890B7D49948380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 209.85.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:88:22:32:89:0b:7d:49:94:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=910af739-435f-4b9c-bde0-1ba918c89be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:73:ca:28:3c:1f:8f:68:20:a1:5f:99:9e:
85:b5:df:22:a0:32:f4:68:8d:81:d9:eb:58:bc:1f:
87:01:74:51:5e:5f:15:46:57:94:cc:04:7f:af:34:
16:52:c2:11:d6:8d:82:b6:a3:03:35:ff:5e:52:7a:
aa:c0:b0:83:ab:02:22:51:4c:43:50:7c:dd:f5:de:
39:01:7b:5f:7c:fe:24:f5:0b:75:c2:d6:71:03:a7:
0d:73:f6:d8:17:01:a9:fa:ad:59:3b:4a:d1:16:51:
63:ea:14:d7:e9:8f:e4:77:ca:0e:29:9e:75:9a:30:
03:00:64:a3:91:b2:fb:e7:30:11:e7:27:ef:10:da:
65:8d:25:74:4f:fe:5e:e7:fc:5c:d5:14:08:ab:12:
99:1b:99:8d:34:32:e6:7c:a0:f8:95:01:ae:94:19:
b3:fa:20:db:37:e1:6d:95:f4:29:70:1e:67:51:1e:
24:67:d6:5d:98:f1:94:03:50:f9:0e:6c:d4:67:5d:
0f:a7:9f:61:0c:d4:a8:cd:6a:ef:7d:89:07:61:f3:
02:52:cf:1c:42:61:34:1e:d7:a7:fa:36:9a:44:23:
07:a4:20:12:09:cd:48:2c:29:40:31:b8:13:64:05:
54:79:5f:1a:4e:05:15:e8:4a:b6:d0:43:e7:72:bc:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:26:B4:E3:0C:3F:28:BE:34:62:99:EE:58:78:A8:66:68:2D:85:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c77f172a-1df8-31ea-92f6-569d849ec8b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.85.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:02:4f:a7:ec:62:64:37:15:ad:b1:94:f2:3f:32:90:02:28:
92:b9:70:14:c0:2e:9d:03:c7:dd:7b:53:ea:ee:5d:63:12:cf:
58:23:f3:e5:a6:98:28:2d:e0:ce:97:13:07:85:23:46:89:64:
d9:81:08:06:7d:a2:17:58:60:a3:c8:e3:26:8a:e6:b4:85:10:
4a:be:45:27:71:b4:f3:f6:d8:5a:54:32:73:94:5f:d5:df:ae:
91:41:b0:83:cb:51:bf:ba:8e:c6:42:48:cc:b4:14:ba:34:a5:
76:61:cb:34:f2:28:b3:ba:0d:0f:02:7a:0b:72:3d:f1:3f:61:
5f:42:6c:3e:c9:c6:79:4e:9c:3f:34:89:2b:cb:f5:e5:89:0a:
c1:db:3c:d1:b2:eb:71:c6:f7:72:48:0c:94:fd:ef:ed:b3:03:
f1:12:f3:a5:f0:2e:99:12:33:a6:4b:22:13:be:89:72:89:90:
b9:78:54:74:6a:b8:29:6c:0c:c5:f0:fc:99:82:18:87:9d:5b:
1c:5b:a0:f4:9a:71:a3:1b:29:f7:0a:b3:ef:76:8e:5a:f1:e4:
2f:26:fe:97:6c:97:2b:56:2b:bd:0f:47:5d:24:10:0a:41:48:
12:cb:14:76:83:b9:a1:d0:fa:fd:f3:21:5f:12:b0:00:a4:b1:
9e:f4:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:14 2025 by rpki-client on console.sobornost.net