Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa
File: 2feb0cec-2470-3c1b-b3be-57e967538fd8.roa (raw, json)
Hash identifier: 4XrDpabBlHe0xbHgC7rxjBwxNHwR6gqZo7cQ/FtuT3Y=
Subject key identifier: 8E:A0:43:85:93:85:16:A3:8A:B2:85:6C:CF:1C:F4:F1:17:9F:A9:74
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858494B641744E75FAA4A81EE3A00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 394285
IP address blocks: 23.88.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:17:44:e7:5f:aa:4a:81:ee:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=2b478426-2205-4603-9b34-a059b804bb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d6:9d:53:58:4a:1b:25:76:e8:cb:61:be:8d:
39:4c:07:b1:e2:9d:80:c8:36:89:df:2c:ad:dc:52:
36:29:43:e9:2a:09:6b:e5:94:19:15:fa:ca:e6:d5:
15:2b:51:bd:95:b8:94:93:dc:27:3c:46:b5:aa:d6:
c7:4b:7f:ce:78:84:26:3a:9f:75:12:45:05:69:5b:
0a:dd:9a:5e:76:01:06:84:10:4e:e2:d4:db:69:43:
34:91:18:4e:90:33:1c:0c:63:fc:c9:ee:f1:20:98:
3d:ca:61:55:60:5f:ee:f1:2a:eb:3b:6b:0c:9f:b5:
e9:fa:12:af:c2:6a:1a:c5:b4:01:b3:de:2d:f0:f4:
b2:59:e0:07:da:b7:2a:77:f8:99:c1:6d:a2:24:d3:
6c:6d:14:ee:72:82:84:a6:ae:6b:58:0e:40:fe:66:
dc:e9:8f:1a:b1:80:56:a2:6b:f4:45:de:83:91:bd:
80:5f:70:3b:b5:d2:53:4e:47:e2:b8:92:53:8c:39:
fe:2e:e5:65:f7:25:f8:74:7a:7f:18:51:25:60:68:
c4:54:64:55:9d:9c:76:9e:52:2d:bc:b1:2e:91:ba:
09:ea:73:2a:83:36:dd:5c:ac:c7:4b:30:5f:7a:fe:
58:3e:8c:c1:35:f7:0c:1e:43:d2:5e:06:3f:8d:74:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A0:43:85:93:85:16:A3:8A:B2:85:6C:CF:1C:F4:F1:17:9F:A9:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.88.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:54:d1:96:2a:0c:a8:5b:20:3d:d7:14:4d:1d:df:13:fa:67:
db:4d:6b:dc:8f:88:2f:b8:01:38:52:b9:b1:4c:24:b4:b1:ba:
b2:e6:88:32:e4:85:30:c3:fa:ab:55:d2:16:c0:0a:b1:a8:db:
09:97:b6:9e:f4:7c:2d:c0:90:d7:65:5c:a4:a7:43:f2:cf:e0:
28:34:01:e8:27:cb:76:a9:b9:3b:ff:0b:51:07:85:01:72:00:
41:d6:d1:e9:10:b8:46:f7:a0:8b:cf:11:64:23:d7:5c:0b:76:
e4:2b:cf:ba:a4:32:84:5d:2a:6f:19:41:96:ff:0a:90:22:1a:
09:a1:54:ff:3a:e7:50:8b:32:b4:a3:13:ef:37:f8:cb:4c:3a:
f4:73:72:35:a6:00:ea:3f:03:70:cf:fa:36:9d:e4:0b:83:71:
34:2c:5f:5a:46:39:7e:80:e1:dd:50:90:2d:b0:ac:39:56:37:
a5:71:c0:1b:bf:83:61:7a:89:32:b5:07:ff:e1:90:5e:ee:7d:
88:a4:b9:11:21:10:55:b7:ce:81:35:64:05:5a:d3:4f:77:88:
b0:f0:9b:00:18:ba:26:5d:bc:42:55:cc:9e:1f:ce:94:23:f4:
e1:9e:b8:ab:ee:91:7c:01:4c:01:e7:d4:3e:3d:58:9b:24:69:
a3:68:aa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net