Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa
File: 553b08e2-7500-3d55-b607-b218b8a593e2.roa (raw, json)
Hash identifier: +a2Hz6XCRhrl6nxV22i2OJQDWU2qzSdTkodkuZSN9Yw=
Subject key identifier: 39:9F:33:CD:5B:76:64:09:7A:FD:B2:C6:AB:AD:59:94:07:75:FD:7C
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858494B64171C41C680CC4A1E1980
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 394285
IP address blocks: 23.88.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:17:1c:41:c6:80:cc:4a:1e:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=7a08b5df-dde6-488b-a2a3-f8fac7bd1b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:5d:f0:67:e1:34:f5:87:28:27:fd:b9:93:
a8:ff:5d:ef:37:8f:53:cb:52:e2:da:bd:ea:15:bc:
32:4e:70:4e:2d:11:04:2f:fd:8f:0a:73:5d:c9:8f:
d9:3e:45:df:4a:31:4b:ea:33:36:10:cb:60:d9:4d:
f8:df:74:ae:34:1a:d6:2f:01:e1:e2:4f:22:73:7d:
8d:ca:c9:51:28:71:c3:fe:72:b9:c1:11:a8:a4:ba:
4d:b7:93:29:cb:ba:7f:ce:b1:b4:b2:60:cb:43:55:
70:71:94:77:fc:0b:0c:c2:ba:fd:13:c9:78:e3:36:
1c:7b:8d:f1:06:48:52:85:0c:c8:75:9d:24:26:49:
4d:2c:64:31:1c:41:cb:1f:fa:7e:aa:7e:e2:2c:30:
6d:a6:cf:b9:5b:41:c3:c5:b4:ac:b8:9c:f4:4c:0b:
c6:07:38:94:55:87:73:d5:bd:a8:33:02:73:1c:e4:
42:8b:cf:eb:92:e9:f2:b0:a5:05:23:57:a1:64:aa:
e2:51:19:e9:9b:e7:78:f7:96:b7:97:f5:59:b3:0c:
92:04:16:87:6f:0a:94:6d:23:8a:97:43:69:5f:53:
cd:2d:f6:9a:02:eb:6a:1f:f5:de:3a:fe:dd:b8:a8:
35:89:98:f7:0b:75:42:c3:00:03:65:21:6c:fa:eb:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9F:33:CD:5B:76:64:09:7A:FD:B2:C6:AB:AD:59:94:07:75:FD:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.88.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:5f:bb:13:df:d5:48:b0:83:8f:75:0d:41:8d:80:7e:e0:ec:
5e:65:80:f8:16:62:8e:80:6a:7d:f0:ca:df:f5:f5:b2:5a:3f:
cd:08:14:28:a8:f9:1f:f9:b7:0f:ea:15:21:74:2d:a2:5b:ae:
09:3a:fc:27:66:e6:c1:59:65:5b:0a:86:a1:4e:8e:97:99:76:
5e:37:90:5d:0a:ba:fa:7a:15:4c:98:c0:de:ef:8c:ef:61:e3:
68:bd:fc:fa:b9:4d:6e:5b:48:af:06:6b:84:d4:03:18:b2:5b:
56:8a:20:19:f2:2f:10:f8:71:f7:7e:82:fe:09:95:ee:f6:77:
f3:a3:85:8e:7b:fd:6f:34:00:16:b6:aa:35:44:a8:89:42:94:
83:52:67:da:d2:46:ae:eb:15:6b:73:12:23:c8:35:3d:73:fe:
87:d0:2f:dc:59:13:53:87:27:19:21:0f:09:17:0c:9b:81:e4:
e6:b1:2e:32:e2:cd:b0:0d:22:d3:7b:65:fb:cf:a4:e6:25:32:
62:01:3a:f6:91:6f:9f:25:89:b3:cc:4f:e1:da:63:09:9d:a0:
50:79:11:bb:e3:72:eb:8f:b7:7f:2b:14:7b:07:2e:16:bc:f3:
9c:df:1c:8c:d9:bb:5c:80:b7:13:a5:73:3c:4c:35:73:6e:0d:
e4:1d:d2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net