Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa
File: e604780b-4bf4-362f-9661-294a2090b35c.roa (raw, json)
Hash identifier: 5TV40LS2n5DrSWfO5TX9Cm6Pdaq8fAthfDI5XPbGTK8=
Subject key identifier: BC:B0:7E:5D:2C:66:0C:26:AD:10:AB:57:E9:65:6A:8F:77:5B:69:65
Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial: 010D0C9F432858495C244708D1199787180415C0
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 33039
IP address blocks: 23.173.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:47:08:d1:19:97:87:18:04:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=b3c67ac8-1e07-4dd4-91f8-8a3f770721cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:fa:d7:0d:3c:59:3d:b4:f6:b9:31:74:fe:35:
fa:48:98:92:39:2a:0c:b6:15:99:47:2c:c0:73:26:
a3:92:a9:8a:b7:f7:cc:f8:8b:1d:c9:31:89:37:18:
19:17:bc:f8:a8:c2:95:9d:45:4f:a7:d6:4a:aa:96:
e3:95:c1:63:87:24:53:8d:c2:27:19:8d:d5:81:88:
3b:5b:f7:0e:1a:ac:35:93:7a:55:ec:10:30:28:2b:
04:df:29:4f:86:da:21:83:3f:f2:d7:16:c5:4d:0d:
16:e1:ae:1b:d0:ba:b1:b7:aa:81:29:19:1a:42:83:
ae:93:99:1a:8e:a2:57:9d:64:36:62:24:98:df:da:
7f:8b:00:e9:17:25:95:7a:1f:9a:32:15:f3:54:88:
15:4a:31:da:82:57:b2:c5:6e:b3:4e:1e:66:24:c7:
c8:06:a4:41:78:63:9b:4f:a6:a6:a7:00:f0:f9:6f:
67:c0:a4:ae:fd:2b:f9:04:62:dc:3a:10:98:e8:1b:
53:08:8a:a2:c6:39:43:80:6b:7a:69:50:54:55:f9:
43:30:ce:a5:22:ba:5e:f7:17:fe:73:ee:95:3a:56:
00:a8:9a:e9:19:39:93:e6:2c:fb:2a:91:dd:be:86:
1c:1b:ae:d6:fb:0c:f9:2f:47:92:ac:e9:3f:43:b0:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B0:7E:5D:2C:66:0C:26:AD:10:AB:57:E9:65:6A:8F:77:5B:69:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
X509v3 Authority Key Identifier:
keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.173.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:26:dd:91:1e:8d:98:24:fa:4c:bd:8c:a7:c0:e2:62:79:8b:
c3:fe:94:f2:49:a9:cc:ad:46:43:b3:6b:41:88:be:f2:21:4d:
b3:e3:df:a1:0f:e7:14:1d:9f:58:c5:0d:ff:5e:2f:a1:5f:a0:
b2:60:21:d8:3b:9a:c4:b0:40:62:08:1a:33:ca:a0:d3:03:04:
04:5e:63:1a:d8:84:e5:29:b2:5e:47:5a:f2:12:ac:9f:04:10:
6b:73:f4:a1:70:2a:14:3c:bb:f4:ef:4b:27:85:6c:32:2a:45:
fa:c4:5d:82:c8:81:6a:b3:fc:a3:1e:22:83:db:ae:8b:d8:98:
83:4d:da:00:fd:db:1a:9e:1d:67:70:40:a5:08:b2:e0:71:cf:
5e:84:3c:e0:c6:d0:b2:22:5a:b6:b9:a0:cd:6c:09:7c:fc:29:
92:d0:d1:dd:29:51:69:65:8b:22:d5:76:85:d4:0a:82:41:47:
db:18:a3:e7:cb:a9:a9:5c:c8:97:40:44:d9:4a:a3:b5:38:4d:
e5:53:fe:d2:e8:f7:d9:66:0e:06:ee:a4:2a:16:5f:e5:10:38:
fb:93:06:82:e9:6b:e0:7b:84:ab:99:fd:7c:7c:3a:aa:6a:e7:
01:d9:8b:0e:14:be:2f:77:37:fb:92:19:18:29:e6:a5:fe:47:
ba:da:12:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:02 2025 by rpki-client on console.sobornost.net