Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/7424def5-3c6d-351a-8d42-734d7b82d6c6.roa
File: 7424def5-3c6d-351a-8d42-734d7b82d6c6.roa (raw, json)
Hash identifier: IQ45FmVGt5MoWlsx7Fl6s+XggopXoW1120M7KpJ3Y2c=
Subject key identifier: CF:2F:FA:F5:2C:0E:CC:17:99:8C:04:18:92:A1:C6:32:90:DD:01:8D
Certificate issuer: /CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3
Certificate serial: 010D0C9F4328584950F95F2C1F79492F0A5518C0
Authority key identifier: 73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/7424def5-3c6d-351a-8d42-734d7b82d6c6.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 23096
IP address blocks: 23.235.48.0/24 maxlen: 24
23.235.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:5f:2c:1f:79:49:2f:0a:55:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=34c2354f-fca5-4c14-98da-de753d9fa9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:4f:c5:9e:12:a6:fd:ff:1f:d1:69:98:e8:
bd:76:5e:f1:11:18:8c:46:af:51:f4:66:e7:41:08:
62:60:85:b3:fa:2a:c2:4a:26:09:1c:28:4a:cd:25:
d7:99:86:d7:dd:f3:95:ac:68:f3:51:37:dc:f9:72:
03:c6:0f:b0:40:21:56:0a:e2:5d:9c:53:d6:34:df:
a5:cb:78:7a:65:10:6b:18:43:9f:94:c7:5e:90:4e:
8e:d7:b3:23:55:bd:52:07:a5:54:1e:35:b4:38:d1:
ef:46:1f:5b:11:a5:cf:a9:66:52:f0:22:52:7e:4c:
cd:3f:7e:43:12:0c:16:51:c8:f7:4f:ea:a6:db:13:
dc:48:a8:d9:5c:87:51:f0:51:61:4c:32:0c:7c:42:
02:da:67:44:d7:6e:bb:b1:1e:75:96:fd:e0:c2:94:
03:a0:6a:3e:c3:4b:ee:55:11:30:e6:45:61:d3:2f:
8d:3b:e6:1d:fa:0b:57:5d:e0:30:0d:25:ac:7f:ee:
48:86:ec:3d:67:db:ab:e4:cd:19:43:e2:5f:a5:a9:
7a:e1:3e:a6:7a:fe:29:50:c4:e0:e0:da:89:31:da:
7a:ae:8c:51:ca:58:c2:7c:66:ec:01:d0:5e:b0:25:
c8:bb:f2:e7:da:7d:fc:25:5e:2a:5c:2a:24:09:78:
f4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2F:FA:F5:2C:0E:CC:17:99:8C:04:18:92:A1:C6:32:90:DD:01:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/7424def5-3c6d-351a-8d42-734d7b82d6c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.crl
X509v3 Authority Key Identifier:
keyid:73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:f4:22:94:33:21:c5:78:47:a9:20:c9:98:6d:1d:85:f1:e3:
89:aa:81:7b:fb:62:d9:db:bf:c2:8d:b2:f8:f4:c4:93:d0:f6:
dc:4e:09:3d:41:df:5b:33:b7:b8:ed:f0:be:0d:21:c2:42:20:
5a:7e:55:92:99:09:37:de:a5:20:b5:07:db:54:73:8f:e4:21:
a5:a4:4e:7d:64:0a:cd:07:6e:46:c9:06:ce:30:83:ce:5b:e6:
cf:03:1d:6a:65:76:af:21:f8:51:3e:d7:28:0e:78:55:f4:4c:
26:6e:f6:b0:f4:5c:53:73:bf:90:44:6d:b4:55:44:31:ce:e2:
b0:0c:39:83:3d:48:00:05:e6:74:e8:2f:43:ae:72:b1:0f:99:
94:39:56:6e:e9:7e:35:26:0a:2f:03:e8:62:6a:fb:48:17:d6:
e4:7e:3a:f1:96:79:47:f1:0a:15:c9:ad:3d:a5:e2:4c:38:da:
72:fb:2d:d6:22:a9:b3:13:2e:e1:a3:d4:03:9e:95:30:3c:76:
89:55:63:85:22:97:3e:2c:67:42:49:ec:32:e3:f4:cb:61:f6:
e5:13:7b:9a:bd:aa:8f:e0:c0:e1:93:b1:80:1e:95:12:d8:e7:
ff:e8:23:43:11:1b:1f:ee:b5:3f:4c:df:be:0b:62:74:4b:88:
28:56:17:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+V8sH3lJLwpVGMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGNmMDUyYTktNzM5NS00MzMwLThkOGUtYjBlYmNkMjNm
Y2QzMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
MzRjMjM1NGYtZmNhNS00YzE0LTk4ZGEtZGU3NTNkOWZhOWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorhPxZ4Spv3/H9FpmOi9dl7xERiMRq9R9Gbn
QQhiYIWz+irCSiYJHChKzSXXmYbX3fOVrGjzUTfc+XIDxg+wQCFWCuJdnFPWNN+l
y3h6ZRBrGEOflMdekE6O17MjVb1SB6VUHjW0ONHvRh9bEaXPqWZS8CJSfkzNP35D
EgwWUcj3T+qm2xPcSKjZXIdR8FFhTDIMfEIC2mdE1267sR51lv3gwpQDoGo+w0vu
VREw5kVh0y+NO+Yd+gtXXeAwDSWsf+5Ihuw9Z9ur5M0ZQ+Jfpal64T6mev4pUMTg
4NqJMdp6roxRyljCfGbsAdBesCXIu/Ln2n38JV4qXCokCXj0QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM8v+vUsDswXmYwEGJKhxjKQ3QGNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wY2Yw
NTJhOS03Mzk1LTQzMzAtOGQ4ZS1iMGViY2QyM2ZjZDMvNzQyNGRlZjUtM2M2ZC0z
NTFhLThkNDItNzM0ZDdiODJkNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGNmMDUyYTktNzM5NS00MzMwLThk
OGUtYjBlYmNkMjNmY2QzLzBjZjA1MmE5LTczOTUtNDMzMC04ZDhlLWIwZWJjZDIz
ZmNkMy5jcmwwHwYDVR0jBBgwFoAUcxZ80PD2awca4NhC94UvLgJn4hkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wY2YwNTJhOS03Mzk1LTQzMzAtOGQ4ZS1iMGVi
Y2QyM2ZjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+swMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIn0IpQzIcV4R6kgyZhtHYXx44mqgXv7Ytnbv8KNsvj0xJPQ9txOCT1B
31szt7jt8L4NIcJCIFp+VZKZCTfepSC1B9tUc4/kIaWkTn1kCs0HbkbJBs4wg85b
5s8DHWpldq8h+FE+1ygOeFX0TCZu9rD0XFNzv5BEbbRVRDHO4rAMOYM9SAAF5nTo
L0OucrEPmZQ5Vm7pfjUmCi8D6GJq+0gX1uR+OvGWeUfxChXJrT2l4kw42nL7LdYi
qbMTLuGj1AOelTA8dolVY4Uilz4sZ0JJ7DLj9Mth9uUTe5q9qo/gwOGTsYAelRLY
5//oI0MRGx/utT9M374LYnRLiChWF90=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:11 2025 by rpki-client on console.sobornost.net