Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa
File: de6a6b49-15fb-3327-a988-9139a73a70b1.roa (raw, json)
Hash identifier: IiERXvCjSqiCTmIs4nChCqNoPtsgo+1ThgoItQLGVRM=
Subject key identifier: 39:4B:AF:9E:BB:EA:C2:6B:48:4B:93:62:99:D4:C7:09:7B:E4:C5:3D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5816D5F22694B60BE4FF000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 173.194.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:6d:5f:22:69:4b:60:be:4f:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2849c298-35dc-4684-a11e-3e274c8c63dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:08:8c:9c:c1:6d:73:8d:4f:35:86:2b:bb:
e3:27:df:19:4d:97:4d:d0:b0:f9:d1:4f:9f:48:18:
1c:83:8f:76:73:ad:f2:6e:f0:fb:a8:ee:43:20:8b:
db:23:d8:40:bf:a9:06:74:1b:d5:65:d2:53:44:63:
59:d0:e7:a1:d3:a5:aa:b9:98:f7:8b:b3:23:80:be:
5b:70:2a:e6:80:a8:c4:5f:57:77:0e:0b:8f:47:d7:
d5:51:b4:98:1a:15:f9:5d:84:c7:57:2d:b9:79:ac:
90:c1:bd:36:5b:26:98:79:17:2b:56:38:83:d6:85:
b9:de:a8:02:d1:0e:05:42:bf:51:bb:fe:0f:18:20:
44:89:82:1d:af:6c:d1:1a:8d:8a:02:0d:b7:32:c7:
69:df:45:40:2f:19:bc:a9:bd:d3:25:2b:82:d3:f6:
f4:3c:db:cb:c9:ca:7d:0b:5f:c3:0d:62:cb:b7:69:
c5:11:2a:81:42:30:15:02:14:75:2c:89:b6:62:ff:
96:13:91:1b:dd:9e:4f:5a:bb:38:38:a7:1e:88:b3:
33:03:7e:fb:1b:55:dd:33:0a:89:1a:a6:18:11:5a:
f9:ea:b6:d6:b1:71:41:c9:10:f1:6c:12:47:2d:4d:
60:2e:87:a9:8f:ab:62:09:3f:f6:78:1f:b3:9e:79:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:AF:9E:BB:EA:C2:6B:48:4B:93:62:99:D4:C7:09:7B:E4:C5:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:14:0e:e7:47:e3:2b:0d:5a:ad:fc:db:8a:3d:ca:03:44:aa:
f5:af:0c:f6:c8:e8:22:f0:5c:19:eb:60:2f:ed:34:92:c2:90:
ec:06:e8:34:fe:00:88:28:3a:80:cc:57:6f:8e:47:83:72:b7:
1d:1d:78:95:96:7b:b3:3f:65:06:0f:be:1b:09:84:b3:3a:30:
62:22:9e:52:97:0b:fa:4b:40:53:79:df:99:55:67:89:52:2e:
8b:a4:f6:d6:bc:ce:98:3e:61:2f:de:e1:b2:04:da:9c:4b:18:
7d:cf:65:7a:d3:f1:d8:1d:7b:f4:60:64:5e:2a:5b:f1:e3:67:
c0:6e:62:7c:2e:87:1e:0e:5f:f9:39:27:9b:8d:c0:0d:37:61:
d5:81:f3:eb:e4:66:a5:ba:c0:7c:a7:af:44:eb:9f:5b:e4:90:
a4:a0:4e:3c:15:a0:0a:37:de:08:2c:50:b1:4b:9f:67:99:a0:
de:1b:cf:ad:54:9b:cd:25:f1:a0:98:9a:84:87:45:58:45:3e:
4a:8f:ba:40:40:67:e1:7e:c8:88:35:42:a2:d2:b3:d7:b0:53:
62:c2:49:d2:b7:31:0e:e1:e4:73:26:63:49:a7:d0:d7:42:e7:
37:fe:c6:3f:dc:02:92:b8:43:8c:cb:cc:01:30:85:d1:53:c8:
3d:4f:32:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:14 2025 by rpki-client on console.sobornost.net