Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa
File: 1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa (raw, json)
Hash identifier: 5ZQ3yQNG1a8wRedWddNV04do8h4U0wmMEVGzOaX9f+Y=
Subject key identifier: 33:64:20:0E:FF:CC:7A:28:B9:9C:9A:C8:16:7B:88:ED:02:20:69:38
Certificate issuer: /CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0
Certificate serial: 010D0C9F4328584965E97E476BCB0143450E0C60
Authority key identifier: D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa
Signing time: Thu 03 Apr 2025 01:00:46 +0000
ROA not before: Thu 03 Apr 2025 01:00:46 +0000
ROA not after: Wed 02 Jul 2025 01:00:46 +0000
asID: 16509
IP address blocks: 23.235.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:65:e9:7e:47:6b:cb:01:43:45:0e:0c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7423c5ab-e2e6-4295-abc7-be3fad2b25b0
Validity
Not Before: Apr 3 01:00:46 2025 GMT
Not After : Jul 2 01:00:46 2025 GMT
Subject: CN=b6bbf4bd-d2b1-461a-9526-458ae4536df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:8c:69:b9:70:4c:d9:e4:79:eb:57:b5:99:
9e:57:85:b9:36:f4:ec:20:2f:ce:64:88:88:ec:27:
4b:50:f6:e5:e0:3a:73:5b:a5:16:f6:0f:cf:63:53:
dd:2c:27:da:8a:42:ab:ea:ac:1c:11:5c:8f:a2:f8:
2d:4c:e3:61:b6:b3:5d:ef:8d:e7:4a:f3:d1:7e:47:
af:03:ed:f7:a2:ea:ac:41:d7:ad:7e:96:70:9a:f3:
f3:83:94:50:03:c9:2c:73:37:7c:08:c8:8d:4c:ae:
fe:85:21:dd:51:b9:b7:bb:ff:5d:3d:a9:0e:84:ff:
86:c5:eb:eb:31:84:36:12:ad:29:db:fc:d1:bc:51:
8b:5e:a4:d9:76:c8:6e:b6:ad:9b:63:e7:2a:d8:54:
22:5f:17:5e:97:ab:7c:bf:c4:ae:03:6a:8c:23:d5:
46:b1:51:17:ff:08:5f:9d:44:99:4d:71:b4:05:52:
11:80:9e:a6:07:41:1d:44:29:94:75:7b:8d:1a:0f:
8c:6b:68:57:3f:af:c8:d7:a9:f2:55:cb:fe:48:10:
33:db:8e:5f:7b:5a:4b:f4:43:97:86:72:47:18:37:
3d:7e:b2:32:53:89:31:c0:06:65:fa:72:55:00:92:
b1:fd:c5:a2:d1:44:ba:83:72:aa:c2:91:34:76:d2:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:64:20:0E:FF:CC:7A:28:B9:9C:9A:C8:16:7B:88:ED:02:20:69:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/1ad71369-4ee2-3c0f-ac70-6cd952b40536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.crl
X509v3 Authority Key Identifier:
keyid:D0:25:61:0D:23:3E:C6:4C:D1:D4:D3:41:94:46:47:D8:F0:5A:AC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7423c5ab-e2e6-4295-abc7-be3fad2b25b0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ca:46:8f:13:2e:c2:b4:40:b7:42:72:82:76:ef:2d:ea:a1:
50:2f:e3:72:87:ff:6e:11:6e:77:03:35:42:41:e8:40:71:51:
f6:99:0b:49:21:cf:3d:70:24:2c:43:fa:c8:64:3e:ae:ca:d4:
13:1b:f0:0f:bf:88:e2:e3:62:c6:d0:2d:69:b9:6b:6c:42:c8:
84:45:ff:65:13:c6:0f:44:e0:60:4f:22:86:6f:af:6c:17:07:
1d:71:be:be:59:41:75:2a:2f:e2:25:4c:93:c4:41:e5:5d:e7:
0e:96:54:1e:b7:a9:71:06:5c:7c:76:d1:04:ee:71:b4:44:80:
31:82:c2:a0:ea:05:52:92:85:7e:a3:71:58:36:8c:5f:51:da:
10:25:13:f6:48:25:0f:13:4c:1b:61:80:0e:74:a8:d9:31:28:
43:80:00:74:0b:03:57:d2:1f:b0:e4:e5:4f:9f:9c:0f:b5:1d:
84:d7:ee:11:fd:46:6c:a2:87:76:8c:91:dd:64:2b:0b:49:d2:
89:0f:90:d4:90:03:ea:7f:12:09:73:2c:51:e6:1a:7f:58:2f:
5a:7b:03:e0:f1:fd:fa:ba:e9:0b:f1:57:6c:99:86:de:a4:56:
5c:2e:2d:e7:9d:d8:c9:48:56:ac:d1:81:67:d9:89:46:59:c8:
31:b7:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:14 2025 by rpki-client on console.sobornost.net