Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa
File: 2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa (raw, json)
Hash identifier: pXf7KSNuGzy7wjNJ3H+LlRjb8uHo2nfSrcLM9p3ulTA=
Subject key identifier: 4F:4B:78:B0:17:EE:C6:50:4D:FF:71:3B:95:07:A4:3C:32:1B:0A:5E
Certificate issuer: /CN=845381b0-384a-4243-95e1-ae5dd9916fd7
Certificate serial: 010D0C9F43285848C6E63861AF161C97455272F0
Authority key identifier: CB:FC:80:79:7D:34:80:E4:19:8F:0D:A6:8E:CB:C6:E2:03:D3:60:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 63023
IP address blocks: 23.158.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:38:61:af:16:1c:97:45:52:72:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845381b0-384a-4243-95e1-ae5dd9916fd7
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=3293c3e9-c213-4d66-b2b9-eb723cd1cb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:8a:78:14:9a:66:fe:96:e1:41:31:29:7e:
8e:9f:f2:13:7c:dc:f0:a8:b0:fa:2c:0c:d8:a6:99:
87:37:a7:e3:59:bf:be:7d:ff:ef:51:06:ef:e1:d1:
fa:ed:6d:1d:89:99:d5:37:53:7b:bb:60:66:7a:7c:
75:df:e8:5c:ac:fd:ce:65:43:32:f6:42:14:10:b7:
1f:27:f0:1c:88:41:d6:9c:f0:7e:8d:7e:a4:59:01:
d1:ac:49:59:fd:87:2f:68:bd:64:a7:a9:25:37:60:
a3:33:30:5a:17:57:81:3a:a9:1f:8a:15:b6:93:1c:
bc:66:d2:62:28:e6:d7:b1:ae:72:b0:16:bd:74:3a:
fb:45:06:f0:c9:a8:2c:8a:7c:5f:88:e5:90:2b:d1:
48:9e:44:cd:f2:63:cd:1e:14:75:73:7c:0e:ec:27:
41:27:ff:79:2e:69:d7:aa:91:44:35:c9:a0:09:f2:
f2:9d:a4:69:69:02:e8:36:79:1b:94:77:de:05:20:
7c:00:af:f9:a6:fe:4b:dd:d0:dc:2b:56:42:f7:0d:
f3:5a:0b:77:47:46:a1:f6:bc:1e:57:95:16:10:76:
65:16:68:ef:02:02:8f:54:e1:f4:60:a8:0a:a5:ad:
42:6d:85:83:9d:a2:c7:26:64:8b:28:c4:29:6a:ee:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4B:78:B0:17:EE:C6:50:4D:FF:71:3B:95:07:A4:3C:32:1B:0A:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/845381b0-384a-4243-95e1-ae5dd9916fd7.crl
X509v3 Authority Key Identifier:
keyid:CB:FC:80:79:7D:34:80:E4:19:8F:0D:A6:8E:CB:C6:E2:03:D3:60:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:94:d3:95:31:f5:20:b7:7f:92:b0:ca:12:97:66:c0:38:a3:
c0:be:2c:f4:59:6c:6c:be:33:d2:48:a1:79:6e:97:61:9c:56:
87:eb:d9:be:f3:58:af:01:c5:16:70:1b:e9:b5:74:59:fe:0e:
d1:78:0b:09:f4:85:7c:a8:c8:0c:c6:3c:55:7d:b4:7c:cb:d1:
07:aa:5e:c3:3e:c3:f7:2e:8d:50:0a:b4:91:4c:45:b0:e7:5e:
16:7b:62:e9:b2:88:88:27:8b:20:a6:71:81:7c:ad:79:6e:dc:
1c:03:75:f2:70:65:57:aa:dd:17:18:d6:bf:0b:a2:aa:66:f7:
55:94:71:6f:fd:ce:81:0b:c4:af:18:d8:ec:69:7b:3a:94:59:
dc:07:e1:68:4f:50:7c:28:a9:26:0f:ec:61:0b:f4:bf:ce:32:
b8:bd:de:82:38:d9:81:25:ff:c5:ea:54:bd:61:a7:d8:2c:cb:
06:90:c6:9e:30:22:1c:cf:ec:9f:4b:d2:b3:e8:b8:b9:7a:4e:
59:f7:52:63:d9:99:65:91:44:b8:d6:8a:09:5e:61:26:dd:6d:
d4:d1:70:b8:93:4c:9b:3c:1e:2d:35:57:3b:b5:64:75:7d:52:
ee:94:61:f7:55:80:3a:1f:67:f0:34:89:4d:a0:de:16:ad:7e:
c1:cf:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:51 2025 by rpki-client on console.sobornost.net