Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa
File: 2f160a0e-a123-3a72-99e1-d669496bd1e0.roa (raw, json)
Hash identifier: bxn1/sgeLbo6i2dHm9u8/IWz4mOj3mp1Qwxp1A2MbMg=
Subject key identifier: 97:8A:D2:34:46:E3:84:36:93:95:20:0E:4C:32:34:05:76:D1:1D:F1
Certificate issuer: /CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6
Certificate serial: 010D0C9F432858498339F34EA6CB02C7CA98BA00
Authority key identifier: 32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 25944
IP address blocks: 23.157.168.0/24 maxlen: 24
2602:814:d000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:f3:4e:a6:cb:02:c7:ca:98:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=e41a59af-48e5-4bd5-92b9-e6c475412db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:bd:9e:f2:c8:f3:38:c3:a7:ab:40:e9:8e:
66:40:e9:2f:cd:4e:b9:c5:6a:64:1d:c7:36:9b:44:
d5:fe:b1:83:b5:bb:1a:6f:ac:a2:3e:c4:cc:4a:10:
83:96:f6:df:1c:ee:60:5c:77:70:bf:9f:f8:2e:95:
4f:c2:d0:7d:d7:b0:af:37:8b:58:10:a4:a9:02:84:
08:1a:c9:4d:49:d9:d0:72:3b:51:a2:2f:01:87:a1:
03:60:6a:a8:c3:af:73:84:3b:d2:85:7f:87:f6:39:
a5:0a:aa:d9:00:c7:5c:f7:98:a5:7a:b2:6a:8a:f2:
5d:38:ed:a6:0d:49:83:c5:9c:b9:49:67:5a:f6:57:
95:5d:aa:bd:df:9e:cf:35:5c:53:45:1c:03:4d:88:
29:11:d5:64:f1:33:54:07:27:cc:41:ba:7d:31:d9:
41:ff:05:43:15:c7:26:a8:31:30:dd:fe:ec:7a:51:
3d:e6:35:ae:23:75:01:71:7c:9a:03:5e:62:be:bf:
9d:26:8c:74:42:1b:64:3a:f6:3e:4c:12:bc:34:e1:
6a:eb:10:5b:55:64:8d:1c:43:77:d5:58:c9:0b:00:
01:2e:ca:68:9a:67:0d:9a:a3:b4:d6:4b:36:7b:9c:
67:9c:9c:de:7b:40:70:c1:bf:d3:be:b3:d9:62:43:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8A:D2:34:46:E3:84:36:93:95:20:0E:4C:32:34:05:76:D1:1D:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl
X509v3 Authority Key Identifier:
keyid:32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.168.0/24
IPv6:
2602:814:d000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:a7:ef:ea:fd:3f:8b:04:83:b3:13:5e:a5:b9:2a:88:19:2b:
16:20:f9:c2:d6:50:14:44:94:50:27:8e:29:7d:04:a4:b8:4e:
c7:bd:68:c9:38:fa:c5:02:ea:b3:20:72:31:71:58:b0:66:af:
dc:b3:7b:02:0d:72:d2:3f:bd:2c:35:15:d2:b3:3d:7c:7c:e2:
c0:ae:cd:0c:e3:1f:a6:00:56:d7:05:41:3f:44:71:37:59:7e:
d0:20:6d:e7:35:63:ae:14:8e:2c:c3:15:e4:b3:5e:fb:cc:0a:
73:b3:e2:29:af:af:90:6b:0d:43:e1:3b:5d:89:64:a6:37:e8:
76:ec:63:58:84:cf:e3:84:4e:c0:c0:3e:ab:80:0c:3b:bf:f0:
45:f2:c4:08:36:9b:1e:9c:b3:66:be:99:7d:05:23:68:67:62:
ec:18:c9:74:97:1d:58:31:f6:26:83:4a:07:1c:c5:89:6e:af:
37:b1:89:ce:7a:1b:df:8e:bc:27:85:77:37:c3:5a:8c:30:88:
a9:2b:94:28:8a:1c:c1:6b:d2:42:b1:fe:7b:c9:e6:ce:9e:f7:
7b:e2:bf:9e:20:b0:e4:a2:a1:46:8c:2c:de:c0:e3:d5:a2:0d:
e7:98:5b:7a:cf:33:04:da:d7:a7:42:59:fc:b8:71:f5:25:b1:
f8:50:84:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net