Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa
File: 44fcabf0-f89c-3bb1-adb4-595ce7300823.roa (raw, json)
Hash identifier: wA9lboYwVu1VJ173c4Nq+b6trl3C9BAFAN/6bgQAcro=
Subject key identifier: B6:FF:72:DD:EF:98:13:74:48:27:6C:FF:13:D9:D0:E8:32:CA:DF:BC
Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Certificate serial: 010D0C9F432858493C09321190BF6347F997B980
Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 401370
IP address blocks: 23.187.152.0/24 maxlen: 24
2602:f82d::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:32:11:90:bf:63:47:f9:97:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=99a5f52a-653e-4ece-9833-0cd72528d108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:64:d8:f0:f3:c6:6c:d6:5e:06:a4:02:59:f3:
7e:ea:dd:f6:c4:59:68:1e:55:08:75:1e:1f:99:89:
e2:49:10:52:fc:bf:d7:94:d3:04:d5:2e:2d:0c:08:
42:80:39:2d:14:b9:bc:7b:b2:13:18:40:73:d5:50:
5e:7a:31:96:bc:68:d6:3a:38:b4:c8:d7:49:d4:ab:
85:94:8f:4e:e6:f1:31:aa:fc:9f:58:48:7e:ab:9b:
1d:a8:6a:e7:8c:c0:31:35:13:3f:19:d8:a1:80:00:
5a:63:69:7b:1d:5b:b5:81:0c:a5:e8:48:60:39:8d:
da:3a:05:06:03:b0:c3:95:b7:c7:2b:67:9f:bf:0e:
d5:5c:71:06:60:2e:41:c2:b9:64:a8:88:e4:72:20:
f7:9b:ac:97:f2:cc:0e:fe:53:74:c6:e9:0c:42:2f:
90:f6:db:fb:59:24:a7:9d:2f:62:c5:e6:40:7a:5e:
4f:a2:50:c0:a9:f0:43:4c:34:b0:b7:f1:5f:66:27:
9d:1f:23:ec:09:f3:75:e2:40:ba:01:83:de:ac:de:
61:23:a5:e1:77:3a:9c:df:a4:a5:3e:db:d3:e5:2b:
b4:1f:55:62:c2:1d:1a:a6:15:47:ab:00:02:d3:8d:
6b:e7:8f:31:b7:87:42:a7:8d:a9:99:e7:70:21:4e:
69:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:72:DD:EF:98:13:74:48:27:6C:FF:13:D9:D0:E8:32:CA:DF:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl
X509v3 Authority Key Identifier:
keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.152.0/24
IPv6:
2602:f82d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:b7:70:26:c6:30:a2:d0:81:02:53:f0:c2:0a:2f:86:55:9e:
fa:03:1c:18:bc:0b:b4:8b:0d:a3:ce:d0:28:67:d6:15:db:8f:
b7:6b:21:0d:ae:c1:cb:62:45:f7:7b:ad:bc:3c:29:a6:e5:7a:
e4:cd:ce:5d:5f:af:0e:c4:9b:87:ff:26:ab:e4:5a:b1:8c:d2:
49:08:d6:67:4c:b7:1e:df:6b:67:5a:bc:a2:3a:b2:63:52:d5:
58:41:78:af:b9:37:e1:2a:e1:c0:77:d6:50:47:80:05:e3:bf:
fa:c1:c4:a4:96:8e:85:d6:a2:8b:91:62:25:fd:c2:1d:e3:b8:
5f:c7:8e:2c:b6:31:01:19:0e:0d:c4:e6:07:8c:3d:4e:e2:9f:
c4:cb:31:bb:ef:67:fa:bd:c6:97:d9:e1:d6:26:a7:c0:fd:08:
df:07:29:99:ee:61:aa:2c:7f:85:6a:f8:89:07:d7:35:63:5f:
24:2c:ce:06:b0:a0:4c:fb:57:2e:42:28:5a:2b:11:0e:7e:f6:
6b:5e:fa:f0:4f:2f:f6:98:d0:29:83:33:32:55:9b:5d:37:ce:
7e:56:1e:a9:96:57:06:37:b0:ab:4f:6c:c3:99:58:8d:84:5e:
72:25:6d:22:db:c2:c8:b9:46:18:68:1b:2b:c2:81:31:5d:bd:
dd:37:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net