Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa
File: 74168fc4-19c5-3549-abc7-a40124cbc34c.roa (raw, json)
Hash identifier: pwD/b3s5Cug1Q/eS5XdmJGf7hXb5P+Nzz+w8gPHiGN8=
Subject key identifier: 21:B9:53:0B:57:EA:97:E2:91:45:80:EF:57:0C:4C:40:EA:C0:6A:B1
Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial: 010D0C9F432858491D7183E8196C5D35F81BB400
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 26904
IP address blocks: 23.247.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:83:e8:19:6c:5d:35:f8:1b:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=67fc8a71-e289-419e-bc62-9712cc6d7088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:b2:3f:50:fb:33:1c:e8:be:31:2e:10:e1:
b3:7a:56:73:cc:92:2b:01:60:9c:c3:f9:d3:77:39:
e7:c7:46:d1:bc:c4:00:c4:f0:eb:1c:40:02:a8:59:
da:10:0f:cc:48:24:fc:06:2a:57:e4:3d:ca:5b:ac:
57:e7:81:e5:11:e9:a6:b9:6a:1b:04:a3:b4:ba:a1:
68:df:94:be:c7:f3:d3:3d:6a:82:2c:c3:60:2d:13:
88:38:67:bf:6b:0f:8a:51:bb:b7:a5:50:89:b8:74:
a0:af:f8:fa:17:4b:6b:c1:92:95:5c:63:8e:fc:96:
c1:a9:ab:e0:ea:ed:3a:e2:73:46:e0:55:49:21:fb:
81:99:e3:69:c7:88:f3:f4:5e:d7:69:63:fb:7c:4e:
f8:02:eb:be:b0:72:ca:17:58:52:5c:80:41:f9:d3:
85:8d:bd:ae:fc:8f:fb:dc:44:b0:6f:9d:f2:e4:bb:
ca:5b:3a:bc:cb:ee:fe:79:b6:e6:e9:54:76:63:02:
02:ae:7c:21:5a:04:54:55:c5:58:37:cc:dc:6b:71:
3b:e7:1a:d3:25:e4:ee:e7:05:a4:ad:06:24:49:40:
8c:fa:4d:39:a4:ce:a2:f2:ba:a0:92:fe:79:f4:9f:
3b:1c:87:5e:f6:87:06:01:5e:c8:d1:de:6a:1c:09:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B9:53:0B:57:EA:97:E2:91:45:80:EF:57:0C:4C:40:EA:C0:6A:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
X509v3 Authority Key Identifier:
keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c1:29:40:10:14:61:30:9a:f0:bc:d7:64:df:6c:b9:8b:56:
e3:e6:d8:83:d6:60:e0:ec:83:08:64:21:c2:a6:89:02:ef:d6:
bb:4e:a7:6a:75:c7:0f:23:cd:67:27:d9:52:fa:c8:1b:53:06:
2f:be:18:39:5f:39:88:28:bb:3d:ad:c2:c2:24:6f:26:d3:e1:
93:e3:cb:52:d2:e9:2c:96:1d:e6:c3:32:d1:fb:7a:6c:81:c6:
af:1c:59:7e:38:95:cc:6e:1b:b8:08:51:4d:9c:c6:e6:56:9a:
1a:23:c6:ae:93:aa:07:04:d1:c6:55:1b:7f:fb:2f:61:c4:64:
a6:0e:c9:5c:f6:28:55:3d:76:f9:ab:65:e8:96:ed:b7:9d:11:
09:2c:2b:49:c6:39:15:ac:d6:20:c8:fc:a8:d9:c8:a4:86:cf:
55:29:a8:4a:26:a3:74:9e:cb:b5:c2:9a:4d:34:2b:51:e0:e0:
a3:d1:0f:16:27:c2:fa:2f:cf:00:e3:5d:ae:be:69:26:79:c0:
54:fc:72:c6:fd:11:de:9b:0a:88:2f:94:d8:45:23:40:5f:12:
94:bf:eb:85:47:20:a7:aa:21:63:c3:06:c9:ef:c0:45:cb:19:
30:d0:d2:13:f4:12:76:45:f3:8b:25:41:9d:ae:a3:a5:42:aa:
42:91:d4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:52 2025 by rpki-client on console.sobornost.net