Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa
File: c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa (raw, json)
Hash identifier: cd/3Ds5YXavpTnjl/gbd8Zy8kZmkN3Aa7BgQ25syXGw=
Subject key identifier: C8:00:C5:DC:FA:64:0A:56:42:1B:49:ED:9A:4B:62:A1:62:91:51:C2
Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial: 010D0C9F432858493C092290CEBA5072F02EA17C
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 16552
IP address blocks: 23.128.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:22:90:ce:ba:50:72:f0:2e:a1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=f522cbcc-16f3-49a2-aa8e-d98da08143f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:ea:4d:94:78:bc:67:21:34:4a:a3:35:d5:
15:bd:99:6c:60:bb:9b:bc:79:b2:f6:db:bd:72:71:
e6:52:84:09:6e:3f:32:cf:4f:03:b2:e1:a2:59:33:
61:0a:72:67:cb:00:40:21:08:a5:7b:ea:55:e9:de:
0d:81:04:95:de:1a:18:46:6f:05:cf:b0:1e:62:f9:
e7:ab:f1:d5:a8:aa:86:c5:42:7b:5b:6a:dc:d8:ca:
2f:66:4c:f7:60:a7:04:d5:7f:85:bd:03:0b:fc:64:
a8:d8:e4:32:62:b1:83:24:e3:3c:8b:c9:e9:e0:96:
9d:75:26:8a:33:02:e0:7c:07:07:4c:d3:25:79:15:
b4:9f:42:37:b1:97:c1:b4:06:42:4d:da:cd:49:a3:
41:e1:07:2a:38:aa:53:73:19:73:5f:4b:a4:8b:6b:
19:62:41:67:a0:ef:8e:28:86:10:0d:52:3d:0d:a6:
78:52:cb:4b:75:b0:a3:24:ae:85:ef:bd:f5:c4:40:
20:09:76:69:a2:a5:47:09:56:98:23:39:15:12:91:
37:a7:af:df:57:af:5c:f6:d4:17:d0:ab:19:1f:0f:
80:b2:22:02:95:fb:1c:5e:53:36:16:49:e2:b7:83:
fe:f9:9d:2c:f0:0b:0b:f1:2c:c7:47:59:44:8f:6b:
39:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:00:C5:DC:FA:64:0A:56:42:1B:49:ED:9A:4B:62:A1:62:91:51:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
X509v3 Authority Key Identifier:
keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:4c:64:c2:8a:a3:be:67:42:7e:6a:3a:46:f1:92:92:8e:44:
6f:ac:90:96:fb:3a:97:53:d6:09:bb:3c:3a:6c:fd:d0:ba:b4:
0e:5f:5d:9e:c5:7a:74:9b:8e:e9:59:4c:61:e7:70:f6:cb:b4:
0d:f0:d3:b0:3a:13:d5:dc:96:1e:f0:dd:22:67:83:90:e5:7d:
26:87:1d:7b:67:73:19:a7:34:87:d4:51:50:31:ae:c7:aa:5a:
06:b4:27:d9:52:aa:4d:11:f1:97:2e:36:90:2c:b9:94:6f:32:
45:64:07:02:ec:d0:38:c1:13:02:f7:3a:f3:78:a7:55:62:7b:
27:ea:2a:ff:98:f1:23:ba:9f:27:ff:f5:19:dd:0d:09:6c:89:
b6:d9:79:1a:92:b9:62:18:a6:e0:f6:3c:68:4e:91:7f:ec:a2:
51:4f:01:a1:e4:e2:46:cd:0e:0a:db:6d:d9:7b:77:1e:87:9e:
37:25:4a:66:05:bf:25:c5:cf:bc:f3:cd:c3:6a:27:56:58:9c:
ef:4e:51:66:66:b3:10:f1:f6:30:ad:21:0e:a1:97:ba:13:96:
43:bb:35:62:10:e0:61:a8:da:63:e9:02:ed:16:51:b5:33:b7:
16:95:ad:91:c7:4f:d0:4e:45:0e:0f:b4:54:ba:d8:1a:94:16:
e5:d4:34:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:46 2025 by rpki-client on console.sobornost.net