Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa
File: 567a0c7b-3f86-31ea-8791-f3940e306bd1.roa (raw, json)
Hash identifier: e7ptQY4UAunb3c54udp9lkvtaIb7AUgD1hUiNy1wmlI=
Subject key identifier: B6:D3:C6:69:95:48:31:74:AF:EC:58:DE:5C:4B:31:CE:3F:49:EC:3E
Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b
Certificate serial: 010D0C9F432858496A19A5D9C5963077BE134180
Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 54041
IP address blocks: 23.142.232.0/24 maxlen: 25
2602:faf5::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:a5:d9:c5:96:30:77:be:13:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=840d75b5-9cda-4b6b-8659-54485cc3821b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f8:a7:05:7e:28:ac:4e:8c:49:63:f6:a0:a6:
53:d7:3e:6c:7d:dc:65:16:0d:8e:3d:9f:dc:87:0f:
4d:7e:c9:e9:a8:28:21:f4:25:78:59:02:48:fa:1f:
9e:27:60:08:50:a9:3b:57:65:14:7c:a6:e6:cd:c8:
b1:c5:68:e1:6b:1a:50:46:0b:9d:81:70:9f:43:8d:
46:70:20:ab:be:2e:8f:ba:fc:5a:81:28:dc:94:d3:
c1:e5:c0:00:0e:7a:a3:1b:52:56:38:be:24:03:43:
6e:61:1c:1e:d7:a0:2b:56:fc:88:ab:75:cd:0a:39:
fd:e9:5e:81:92:1f:3e:ab:af:24:83:6d:f5:c2:d6:
09:8f:66:94:15:f4:12:dd:bd:91:d3:87:63:f4:a3:
92:ff:d5:26:e4:7b:c3:ea:8d:31:ed:d4:0b:15:18:
03:92:89:23:df:b0:19:4f:b0:db:f8:34:97:26:19:
59:ed:9a:34:0d:76:ec:d9:2b:af:8a:68:26:d0:1d:
a4:44:bb:84:24:cf:8a:b7:24:b5:8e:c6:88:f6:ca:
e8:07:03:76:0d:ff:d8:ae:c9:9b:c3:5f:2c:e6:86:
17:28:5f:a3:32:52:8c:f4:c6:e0:c2:41:99:88:a3:
34:25:d0:1b:4a:20:28:85:82:52:24:90:0c:84:54:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D3:C6:69:95:48:31:74:AF:EC:58:DE:5C:4B:31:CE:3F:49:EC:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl
X509v3 Authority Key Identifier:
keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.232.0/24
IPv6:
2602:faf5::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:62:7e:f0:af:f9:db:d7:0b:0d:ce:6c:49:98:ed:dc:24:02:
b7:3c:56:6c:a8:3f:32:4b:b8:49:eb:83:a5:21:1e:37:8a:a7:
fd:49:9b:35:60:cc:61:ff:a6:75:6c:eb:d7:bf:67:17:26:6b:
79:59:ea:2b:57:d9:d4:29:67:36:f7:06:f3:33:31:8e:71:3a:
a1:63:b5:77:d5:3e:12:91:3f:c4:8f:0f:42:38:30:c5:ea:01:
1c:37:ee:76:ea:4b:d4:cf:17:e5:6d:c9:df:b1:69:6a:ef:48:
52:ba:e4:2d:87:d7:91:17:cf:91:48:f4:95:76:7e:04:1a:77:
a3:17:22:97:7e:ef:64:8f:19:b5:06:27:4e:bc:eb:e0:5e:3f:
8c:36:52:d6:13:e5:ed:e7:3c:55:49:69:6d:77:be:35:fd:fe:
ce:47:4a:bc:23:b5:b2:95:3c:6f:64:5d:1a:f8:1a:47:49:ba:
f0:f6:ab:3d:d8:8d:8c:fc:20:bd:65:39:29:1f:44:e2:de:45:
0d:a4:78:66:d0:48:b1:47:b0:4c:bc:d5:9a:6c:ef:6d:13:a4:
c9:73:28:7b:70:e3:3b:ac:a1:61:55:e3:e2:6a:98:b0:75:39:
e6:98:76:33:89:bc:a2:0c:9d:d1:ee:2a:e9:5c:9c:3a:71:f3:
76:bd:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:40 2025 by rpki-client on console.sobornost.net