Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa
File: 2798972b-fe2c-3ced-a28d-a282be3e435d.roa (raw, json)
Hash identifier: sC3mLtAaUOrOzW/vmS35P6YitVPGxHbO8eP6oVSlNv0=
Subject key identifier: 01:A2:D7:C9:E2:0A:B9:12:40:C8:D1:5A:6E:66:B4:15:FF:05:04:DD
Certificate issuer: /CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Certificate serial: 010D0C9F4328584908816C6E8E59D3F86F8CE100
Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 36369
IP address blocks: 23.131.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:6c:6e:8e:59:d3:f8:6f:8c:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=9838d518-62ad-40b3-8fd2-7af6f508e3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:08:8d:41:8d:28:65:f7:23:3b:54:a1:e1:e7:
72:37:93:7b:6e:aa:88:6c:4c:3b:30:9c:71:cc:56:
16:f8:26:e8:02:af:32:3d:e7:a5:2b:8d:75:fd:07:
f7:58:44:68:e1:29:51:aa:32:3d:a8:d7:4c:d9:b1:
89:b6:b0:3b:07:8f:73:85:9e:e5:9a:c7:22:60:e9:
3b:81:38:af:fe:1d:71:63:5f:fa:25:eb:fc:a2:8a:
59:01:08:c2:20:21:9b:96:c4:ae:64:ff:1f:37:4c:
e7:99:2d:d4:9a:fb:78:4e:38:d6:12:b7:51:ed:d2:
cd:e1:f5:50:3e:b9:db:30:24:74:87:e8:e0:a5:ad:
ff:f0:58:51:34:88:d8:3a:9a:85:e7:44:39:f4:47:
e9:2f:fb:f0:3f:15:01:9a:b6:c5:5e:5b:d1:50:4f:
7d:9a:ae:b1:cf:94:22:16:86:a1:e6:22:92:27:5a:
13:0b:1f:87:e0:1f:bd:90:0e:cd:3e:d0:2b:69:37:
8b:5f:2f:d2:02:ac:ce:23:b7:06:2c:7e:e0:93:6d:
6f:c1:dc:61:74:50:57:48:59:81:b8:4f:31:56:e9:
b8:3a:3e:de:a1:21:65:7c:6a:7e:d9:d1:61:2a:87:
68:9a:9d:2b:24:a5:70:03:24:17:49:e1:db:7f:94:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A2:D7:C9:E2:0A:B9:12:40:C8:D1:5A:6E:66:B4:15:FF:05:04:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/2798972b-fe2c-3ced-a28d-a282be3e435d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl
X509v3 Authority Key Identifier:
keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:9a:34:e3:96:cb:d7:0a:8a:6e:cc:a4:8d:8b:15:56:09:37:
0e:cc:2b:de:d8:52:61:20:c6:1b:d1:bf:ad:76:2d:6f:32:30:
6b:ed:00:53:69:2d:a6:4f:f3:d0:26:13:1f:cb:4a:70:a2:dc:
3f:02:b5:45:6d:3a:c5:dc:be:d7:4b:e5:97:be:3a:ba:20:e7:
e9:2b:d0:71:8c:95:68:a5:1e:8b:8d:d5:9e:c3:75:bd:2d:57:
40:08:31:fb:f2:80:ad:84:b4:4d:3d:0a:0a:ac:cd:e1:fe:fe:
5c:09:0f:17:a6:3a:68:44:4b:e5:37:09:03:25:aa:d9:d4:2a:
af:23:52:a2:d6:56:fa:2a:2f:99:96:8e:f9:d6:35:16:a3:e1:
4c:25:7b:10:91:bb:1d:5f:a1:d2:b3:95:44:1c:a4:3d:f6:27:
f7:bb:3a:b9:04:ed:39:a4:79:0f:29:07:5f:ff:6f:96:00:2a:
8e:ec:e9:4a:5e:a8:4b:f9:ff:ac:6f:c6:d9:fe:b2:f5:f5:6d:
bb:be:8a:01:16:37:35:a5:be:1f:51:5c:2c:1e:56:a6:7d:8c:
d0:34:d1:57:d3:5f:cf:cc:5e:bf:99:cf:5a:28:b2:58:fb:f3:
61:1e:e2:29:9c:fc:82:cf:5d:b3:81:60:f9:49:c3:9a:87:57:
d9:71:a3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:06 2025 by rpki-client on console.sobornost.net