Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa
File: c53925ff-d700-3546-9f23-98b9543e1426.roa (raw, json)
Hash identifier: cUQcXZenSpIV1tMpMCkZAf9BQYyQbGEvdKQZL2kYTy8=
Subject key identifier: 4E:35:12:DD:EE:8F:A0:27:36:AD:2B:46:32:6C:79:C8:F8:3C:05:A6
Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
Certificate serial: 010D0C9F432858497114294824CA3A9C81E2F300
Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa
Signing time: Mon 07 Apr 2025 01:00:47 +0000
ROA not before: Mon 07 Apr 2025 01:00:47 +0000
ROA not after: Sun 06 Jul 2025 01:00:47 +0000
asID: 398741
IP address blocks: 23.172.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:71:14:29:48:24:ca:3a:9c:81:e2:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
Validity
Not Before: Apr 7 01:00:47 2025 GMT
Not After : Jul 6 01:00:47 2025 GMT
Subject: CN=91aa8c35-a42a-49e5-a958-d6921a051890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:77:c6:ee:a4:4f:ca:38:f9:a0:9e:8d:08:
f7:34:e5:fc:3f:8f:67:a0:f5:b3:0a:fd:62:5e:08:
b0:59:df:1d:80:cd:4c:91:2e:f8:c0:c0:7c:92:0c:
5d:a4:ae:9e:ad:84:fd:1c:40:e4:8c:39:56:6c:9c:
37:8f:65:61:31:1a:3a:25:c9:89:05:92:a2:00:86:
a3:c1:cb:8c:a8:74:93:06:14:f0:0c:00:8f:1c:61:
1a:e1:a6:8d:5a:50:6c:f7:3a:06:e8:ce:8f:dd:20:
62:3b:c6:bd:2c:d4:97:ee:2b:60:d5:05:4b:d1:6b:
ee:b5:44:f3:13:d4:9b:df:f3:b2:32:94:0b:fd:e9:
fc:dc:79:65:d3:97:d2:1d:4f:92:da:50:45:f5:ec:
01:7f:23:6e:d6:fe:b6:e7:0f:72:7e:b6:1e:cb:00:
7b:dd:02:ad:7d:af:ee:86:15:84:85:80:23:2e:4d:
ed:0a:1c:27:1e:50:c8:64:5d:b8:14:b4:bc:f1:bf:
29:ca:c1:b7:65:0d:41:64:b9:95:6b:00:e0:76:b9:
22:51:9a:a1:03:a4:cd:4c:95:89:15:49:49:fc:a4:
c6:0a:b3:0a:04:9a:20:8d:c7:c3:14:1b:bd:2c:30:
35:bb:8c:20:87:20:19:eb:de:4a:1e:35:7a:f7:20:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:35:12:DD:EE:8F:A0:27:36:AD:2B:46:32:6C:79:C8:F8:3C:05:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/c53925ff-d700-3546-9f23-98b9543e1426.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl
X509v3 Authority Key Identifier:
keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:68:c9:27:c1:c6:2b:95:0f:cb:8d:15:48:3b:99:28:ae:74:
c6:98:3b:94:bf:06:f4:66:ac:bd:96:31:61:86:7a:62:8c:24:
58:ae:7c:f5:ad:9d:cb:e0:3f:80:52:f1:16:94:a1:4f:91:b6:
b5:ad:74:65:f7:aa:46:a9:75:e6:99:16:7a:78:f5:24:83:5b:
1f:15:11:dc:d4:ed:e8:46:17:83:ee:09:63:5a:7e:b2:f4:a4:
4b:7e:11:87:2e:d0:ea:30:66:3e:8f:28:7c:e6:73:e7:20:19:
53:8f:99:88:c4:e9:07:88:e1:2c:2e:46:49:b6:da:a8:32:12:
50:88:eb:d1:8b:fb:2f:79:27:6b:47:72:54:a6:7c:ab:94:e7:
af:d8:14:c6:8a:1e:f5:6b:c4:13:90:34:4d:56:be:ed:ca:dc:
6c:9d:ca:74:e3:8d:e9:3d:0f:0c:97:74:ea:be:a6:91:c7:95:
6e:64:58:f3:85:83:33:9e:a7:99:66:03:89:51:78:60:62:8d:
6f:19:04:ad:2b:c4:34:13:c8:4b:32:df:8c:f4:16:89:93:eb:
88:d0:14:59:e7:2c:d4:6a:26:b9:56:39:83:eb:6f:bc:6e:1e:
e2:9c:0a:61:c1:c6:ee:b4:28:2d:37:94:a8:82:f9:fc:34:db:
b1:56:ef:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:14 2025 by rpki-client on console.sobornost.net