Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa
File: faa2ef74-f3ac-358c-9428-0eb061b7e349.roa (raw, json)
Hash identifier: nmniko+o0LR6FGJD/+o0Klb2JiI+kA2skhuXGngMktw=
Subject key identifier: 97:DE:B0:43:1B:47:A1:A2:69:8F:56:B0:A6:83:F9:70:1B:6C:63:6A
Certificate issuer: /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial: 010D0C9F432858498339F61CEF398615C54B1F80
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 46983
IP address blocks: 23.157.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:f6:1c:ef:39:86:15:c5:4b:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=42ff35c0-8934-4010-8e30-f30aa1603023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:9b:8e:62:62:33:21:5d:b7:75:dc:9c:b7:
07:09:29:5e:a0:97:21:88:b7:0c:34:c0:a8:34:2b:
a2:f4:1d:51:f9:9d:1d:ea:e8:e3:96:34:fb:90:70:
bd:bd:40:f0:a4:cd:b5:9c:35:ce:cd:2f:3a:42:db:
f3:c2:c9:1f:f6:b4:0a:70:e2:24:72:a6:7d:18:05:
ac:82:17:9b:4a:d0:42:46:9e:c6:b7:ce:bf:55:a8:
57:98:ea:f8:b1:0d:18:ba:93:21:fb:02:14:07:be:
f6:5d:55:5e:a6:4d:b4:94:c1:26:e7:e1:99:a8:95:
e9:ea:98:8f:bf:f9:26:96:11:96:c4:23:7c:24:f8:
e5:8c:52:63:9d:61:7b:d3:9a:48:44:8d:1c:df:3e:
a9:e7:7e:ae:4a:51:df:d3:7e:aa:a0:a6:9c:e5:0f:
88:bd:c3:a2:db:9c:38:cb:dc:71:07:26:25:33:3b:
61:f9:74:f9:69:f6:7b:47:bf:28:f9:1f:fb:ed:76:
ac:57:66:7d:a1:af:72:3b:62:4b:37:d2:83:7e:54:
63:5d:08:83:49:e5:2a:90:ad:46:5c:c7:a8:d1:0d:
a7:00:35:24:fb:4c:92:79:d3:22:59:1a:20:eb:67:
ac:ef:b7:51:e0:10:44:e5:44:be:2b:ad:5e:49:b2:
aa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:B0:43:1B:47:A1:A2:69:8F:56:B0:A6:83:F9:70:1B:6C:63:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl
X509v3 Authority Key Identifier:
keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:78:ff:47:c9:c5:11:b4:b5:81:cf:16:51:d3:cc:62:11:59:
eb:d7:4b:c4:37:d7:bf:d3:91:68:a4:bc:8e:0d:93:66:7d:94:
9f:5b:15:87:e4:fc:b5:1d:b4:81:28:4c:af:d5:b3:aa:fe:b6:
1e:3e:1f:df:26:d3:91:68:06:e5:3e:b0:67:6f:ea:f2:ac:39:
6f:05:8e:8d:60:42:7a:d7:72:fb:59:4e:67:a9:a5:f2:64:a8:
94:8a:e4:15:59:00:74:2d:53:42:0c:0e:b2:5e:19:ba:e1:65:
de:ab:33:b1:1d:36:6f:8f:f5:f9:b6:09:7e:41:db:80:07:5b:
7c:ba:b3:0b:e4:85:82:34:16:81:7c:bc:94:6b:63:c7:f8:39:
3e:69:41:6a:f9:fb:43:1d:14:1f:e4:9c:45:1d:a7:57:d2:c9:
d1:b2:94:97:e5:4b:1a:be:ec:9e:3d:ae:81:a8:0a:94:00:5b:
d3:c9:80:cb:09:b8:39:87:10:11:bc:9c:b6:79:ad:24:ab:0d:
3e:f6:f0:84:a4:80:4a:78:11:29:43:51:f6:7e:d4:0a:87:1c:
4d:5f:9d:db:e2:f8:e1:f1:92:da:1d:f3:0a:45:69:05:5d:1f:
37:af:10:8b:38:26:03:3c:27:1c:92:f6:1a:29:0d:9b:f6:f4:
63:9e:35:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:48 2025 by rpki-client on console.sobornost.net