Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
File: 0e8a0d07-db89-35b7-89ab-5b71612a7984.roa (raw, json)
Hash identifier: BGPWwcUXBzHScIavgqXOvJ9uL4QKvYXbDWNGhw5Kbnc=
Subject key identifier: 48:86:A7:24:19:22:EA:08:8C:65:A3:75:99:E2:80:77:DD:13:64:6F
Certificate issuer: /CN=1d6006cb-f538-4709-8be5-960b57450a76
Certificate serial: 010D0C9F43285848AAFB4E528BB08F63DE345B98
Authority key identifier: 5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 396422
IP address blocks: 23.151.88.0/24 maxlen: 24
2607:3dc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:4e:52:8b:b0:8f:63:de:34:5b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6006cb-f538-4709-8be5-960b57450a76
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=a57eb99f-a256-4578-8195-65b2983ddef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:38:66:60:7a:47:83:de:ea:69:39:24:46:c5:
8b:f0:e8:f0:26:4d:a2:23:5c:d4:cd:06:cf:60:ff:
07:8c:63:54:d6:dc:e5:4c:32:69:83:11:c6:fa:14:
d9:c0:fd:9c:20:f8:14:0f:76:7d:7b:6c:22:bc:ef:
55:cd:97:ff:d2:44:10:b2:56:67:f6:66:7b:c5:8a:
a3:e5:3e:15:d5:a6:42:9d:0d:12:12:3f:cf:bf:2a:
82:0a:ed:a3:b4:c2:26:12:f9:98:b5:40:2d:29:5c:
d4:5f:88:ae:2a:6b:af:d1:7d:dd:a2:4b:b9:6f:4e:
aa:d6:51:49:ac:a8:1e:7d:38:2c:1b:76:34:88:02:
8d:03:d3:27:22:4e:57:78:e0:4a:5d:71:da:be:c7:
ef:de:b7:41:31:d2:e3:de:3c:3d:20:96:74:f0:35:
f9:cd:b9:e2:32:54:3a:db:db:ba:20:b2:02:f8:15:
b8:02:59:81:cc:43:b1:8b:80:dd:e4:0d:d3:79:a5:
17:a6:91:33:d4:a5:f5:5b:9a:41:ab:be:43:e6:0e:
f5:fb:93:ab:01:46:82:09:18:ed:59:da:26:e7:19:
07:d3:0e:58:4c:e9:61:dc:e5:0a:95:b1:a7:8f:cf:
24:f3:04:f2:38:3b:37:e9:02:62:cb:05:85:bc:ba:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:A7:24:19:22:EA:08:8C:65:A3:75:99:E2:80:77:DD:13:64:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.crl
X509v3 Authority Key Identifier:
keyid:5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.88.0/24
IPv6:
2607:3dc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:f7:19:63:dc:b2:4e:29:b9:4b:3b:ce:d0:25:7a:54:50:9f:
5c:73:08:9d:bc:70:cc:be:f2:0e:05:77:c1:9f:1c:3c:ce:58:
c6:5b:99:25:40:b8:f6:b5:a7:c0:3e:71:cf:d7:bb:7d:8e:48:
25:5a:de:da:51:40:f0:3d:37:f3:55:15:4c:4b:97:b3:e5:33:
f3:be:bc:20:26:43:6c:6c:74:6b:a3:e1:82:03:fd:ef:c8:a1:
56:b7:7e:04:b3:c7:6c:82:b7:86:83:9f:00:58:7a:4c:f6:67:
f5:fc:77:05:35:a2:f7:58:25:20:e6:3b:47:08:bb:b7:56:61:
7a:1f:50:85:af:9d:f2:d1:f6:dd:2f:61:d1:45:dd:88:f1:ea:
ef:83:5c:1b:bd:eb:70:11:8f:4c:eb:ca:58:66:fd:5c:31:86:
cd:9d:21:77:1a:29:4b:ea:49:f0:76:23:2b:18:2a:98:6c:d5:
df:d1:d0:92:24:46:65:be:6d:c4:74:09:20:e3:63:a5:a1:64:
22:34:cc:52:b6:56:c8:3a:cd:24:60:37:27:d7:44:b7:fb:cb:
c6:9e:7f:6c:d8:d0:05:06:37:c2:a9:6d:2c:5e:8d:d9:08:45:
0e:ed:e5:8a:0a:ce:f6:b9:43:a7:21:4d:94:53:ed:dc:57:01:
a5:c4:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net