Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa
File: 8e2b994c-1b4c-3add-91c2-76c003453ce8.roa (raw, json)
Hash identifier: 2YEzIy0f7698cQU8vz5KTPAP3VNeOvg1HOqL9LgTYJA=
Subject key identifier: 66:F5:DD:33:C2:7C:18:8B:C1:35:02:86:80:9F:CE:90:B0:E2:6C:2E
Certificate issuer: /CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8
Certificate serial: 010D0C9F432858494CC94F30D91119230D0D0F00
Authority key identifier: D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 401401
IP address blocks: 23.191.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4f:30:d9:11:19:23:0d:0d:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=a3c7600c-7f43-4506-ad30-2022087fc14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:e3:58:17:c4:3c:de:e2:9a:9b:86:71:f8:
0d:16:90:56:39:bf:f5:57:ca:66:24:fd:e2:c6:fc:
01:e0:5d:ae:66:d0:bb:3a:26:b8:90:50:6f:53:6c:
f2:79:24:7c:d8:ec:16:b0:dc:44:52:a4:af:59:67:
80:30:40:db:27:13:33:42:04:a7:a7:44:1d:2a:de:
18:7d:ac:a6:92:e2:78:88:7e:a8:5f:18:8f:4a:2c:
20:1a:f2:f6:20:5d:6f:f8:d1:bc:6c:f7:e9:3c:63:
21:ac:94:96:08:e8:b9:98:78:7e:3e:7c:67:e0:c7:
b7:ac:99:75:12:a0:6a:87:22:40:09:ac:2e:9f:c2:
0e:09:1d:35:cd:23:af:19:35:a6:77:6d:42:7a:36:
e8:42:b9:5f:16:8b:51:38:96:03:e9:2d:2e:54:ff:
5e:a0:61:e0:dd:ff:63:87:6a:68:e6:5b:a5:7f:42:
5e:14:dd:76:75:c2:74:96:28:7f:47:33:83:49:a6:
ac:d1:0e:2f:41:61:0f:4a:3d:43:a6:09:80:20:a7:
bc:2d:db:02:58:8b:ad:b3:1b:f6:04:f3:d8:07:fc:
9e:87:f1:60:05:a9:d1:fa:19:97:a2:17:d1:a3:0c:
40:ef:1c:c9:4d:b0:df:36:0c:23:35:87:a8:66:fa:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F5:DD:33:C2:7C:18:8B:C1:35:02:86:80:9F:CE:90:B0:E2:6C:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl
X509v3 Authority Key Identifier:
keyid:D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:18:35:4e:ba:68:8d:be:e3:c1:93:ad:16:cb:57:44:ac:06:
53:da:56:73:d9:1f:02:59:79:b4:84:84:51:1a:a5:91:a6:32:
85:9d:e3:d7:c1:c7:ba:0b:d8:23:93:fd:c2:2c:c7:9d:a9:84:
77:43:92:0a:e5:52:f8:a6:e2:b4:5b:a4:8b:06:72:0b:fe:e3:
5c:6d:b9:7a:2c:a0:49:d4:b3:f5:55:84:99:ad:55:52:5e:69:
ee:93:41:c3:72:3d:ba:cb:d5:6a:b2:99:43:1b:01:64:47:9b:
6d:1b:5e:91:16:4c:a5:bf:66:64:37:ae:b1:64:d1:36:25:c7:
b1:ff:5c:e4:2e:0a:b4:0b:dd:d7:da:32:49:15:27:5b:ec:30:
68:9c:4b:45:bb:c2:62:f6:69:62:8c:49:a3:62:65:01:e2:2d:
9f:67:6b:3f:cf:16:62:16:79:24:a9:3e:78:71:a0:e9:44:4b:
48:bd:b3:d9:bf:14:32:6e:75:ab:bc:54:3f:5b:f1:8e:f4:b7:
33:23:e6:73:85:7d:f1:d2:75:98:08:7f:25:d3:e0:da:40:4c:
15:92:aa:31:eb:5a:2a:b1:80:28:46:5b:a7:a8:65:aa:4f:11:
79:e5:65:89:65:5b:60:f2:cd:72:e2:fa:cf:76:2b:e6:70:b5:
5c:f4:c3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net