Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/5b9b1057-827d-3378-bedc-a67f58f97a5d.roa
File: 5b9b1057-827d-3378-bedc-a67f58f97a5d.roa (raw, json)
Hash identifier: WlMIBNkgs5PHJqtZSBIR74QNdsl+kyh4JQXUnM0AlRk=
Subject key identifier: E1:05:46:F1:BB:D6:67:C4:B2:7D:93:20:E6:76:98:97:8E:FA:31:9E
Certificate issuer: /CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
Certificate serial: 010D0C9F432858496FAF14A1730898BA9AB84380
Authority key identifier: 96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/5b9b1057-827d-3378-bedc-a67f58f97a5d.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 212013
IP address blocks: 23.157.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:14:a1:73:08:98:ba:9a:b8:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=40db4904-db64-40df-ba7a-7a0f715e6ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7b:c7:ed:66:fa:ed:c4:0b:9d:fc:88:6b:6b:
a4:56:91:b7:98:45:c8:39:d1:3c:db:44:0e:4b:5d:
e1:3e:aa:6a:ea:ae:6b:19:ff:c5:d4:49:ff:9e:63:
c5:0c:32:ad:74:3e:96:4d:56:0c:f1:55:f2:6b:c5:
d8:fc:b8:ce:05:09:34:a7:40:fa:36:bc:74:c4:2d:
81:3f:d6:3a:a0:a1:78:10:6e:a9:71:13:15:23:2a:
92:fc:ef:06:a5:ec:82:c4:1c:38:de:70:ef:7b:0d:
94:91:72:3e:5d:63:b9:ae:4c:a1:39:b0:9c:89:48:
db:c6:44:20:8c:12:eb:3b:4c:4e:80:41:59:11:ce:
6c:6f:42:42:ff:f6:30:3c:aa:78:0d:40:97:32:84:
0f:62:fc:d7:20:0a:0e:99:0c:80:7f:62:c0:0b:4d:
27:fa:02:db:f5:0c:ea:18:e0:4e:70:bf:69:f1:72:
c7:16:d1:d1:42:2e:09:6a:b0:65:38:e2:4b:d5:a9:
79:a7:84:cb:ad:f6:fa:ff:74:49:d4:7e:6f:e1:e9:
25:c6:c0:07:a7:f3:97:c4:84:65:70:73:6d:5c:4a:
81:73:34:c9:c4:e0:4e:1b:8d:32:2f:04:4f:f1:d0:
1c:08:72:dd:6e:4b:59:2a:a4:14:48:dd:9a:06:85:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:05:46:F1:BB:D6:67:C4:B2:7D:93:20:E6:76:98:97:8E:FA:31:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/5b9b1057-827d-3378-bedc-a67f58f97a5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl
X509v3 Authority Key Identifier:
keyid:96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:d2:ce:b2:ff:9a:d7:fd:2c:8a:51:0e:68:61:35:3e:2f:b8:
bd:82:30:07:be:9d:bb:72:90:f8:c4:69:f8:66:a5:33:c1:14:
bc:1b:c0:78:e3:4e:48:e1:b4:b9:b3:88:cb:f8:53:f0:51:79:
82:e6:0d:89:0a:79:8f:f3:f4:3f:8c:0c:0d:e1:f9:61:fb:40:
76:aa:35:58:44:3d:fc:42:89:15:e4:b4:47:63:72:8d:70:56:
6f:b4:bb:40:c9:75:45:58:63:f8:bd:c4:dd:ec:31:8d:e4:f2:
2f:0a:6e:da:15:8e:d5:8d:c2:2e:a8:d4:11:21:5b:31:ec:45:
ab:fc:ee:b2:89:b1:d0:1f:d4:dc:3f:8f:64:b6:79:b1:11:cd:
55:89:96:04:31:9c:65:d1:39:ed:3a:56:3e:e9:2f:6d:31:44:
9f:36:2f:8c:4e:97:68:af:25:c3:4b:7a:ad:93:6e:6b:62:ed:
bb:95:9a:ea:ee:42:51:ec:15:27:fd:93:97:eb:e4:7c:2b:f1:
80:24:2d:66:30:e4:ba:c3:0a:b1:64:75:ff:25:56:7d:a3:dc:
82:e3:a5:f8:d0:14:a6:fe:84:44:44:0c:35:1a:03:5b:ae:8b:
79:6d:1c:2d:a0:e6:ae:5a:20:97:2e:7d:5a:3c:b6:03:9d:47:
7d:af:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:48 2025 by rpki-client on console.sobornost.net