Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa
File: ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa (raw, json)
Hash identifier: K+GpjIqDJy4rjsl07dTlh0znZ2WMVya77PJVLkXI91k=
Subject key identifier: B8:EE:97:1A:EC:E2:4C:8A:54:AB:60:68:8E:9C:37:B9:94:F5:0D:49
Certificate issuer: /CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Certificate serial: 010D0C9F4328584968B41DFE8ED04D4BA523B898
Authority key identifier: 4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa
Signing time: Fri 04 Apr 2025 01:00:47 +0000
ROA not before: Fri 04 Apr 2025 01:00:47 +0000
ROA not after: Thu 03 Jul 2025 01:00:47 +0000
asID: 401598
IP address blocks: 23.132.52.0/24 maxlen: 24
2602:f73c::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:68:b4:1d:fe:8e:d0:4d:4b:a5:23:b8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Validity
Not Before: Apr 4 01:00:47 2025 GMT
Not After : Jul 3 01:00:47 2025 GMT
Subject: CN=199b288a-db85-4853-b135-476d79265e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:bd:f3:fd:7b:0a:73:57:b7:b0:c7:65:eb:
0d:e2:d9:95:0f:8f:44:47:4c:92:09:63:e2:96:37:
34:1d:ac:16:82:b6:7d:27:01:ac:f5:a3:bb:cf:7d:
46:d7:fe:75:00:cb:ab:04:72:dc:38:9a:85:0b:a0:
94:f4:a1:d8:1a:7a:1d:cf:e4:0d:da:83:78:5e:fc:
44:ce:34:d2:eb:af:fc:c1:0f:a2:5e:2d:2a:47:d8:
07:42:01:c1:57:20:a3:c1:6a:6a:2d:8e:97:98:52:
00:a6:8f:fa:81:c7:02:85:67:00:73:d2:2a:91:40:
46:aa:bb:cb:5a:92:db:69:26:0f:d0:0b:5a:79:ce:
42:bb:60:4b:06:33:01:f1:da:1f:92:eb:6a:b0:b5:
b3:3a:12:ec:7b:27:d2:61:c1:00:0a:cb:98:f4:62:
c6:fd:11:0d:b4:ba:57:a1:e9:3b:b4:7d:b4:c5:1d:
66:ee:0b:c0:0d:e4:98:84:1f:35:ea:9c:10:e4:6f:
e9:64:4c:9d:0c:e6:d4:c7:5b:38:53:28:7d:9d:56:
bd:a3:54:7e:92:bc:95:ce:be:6f:61:4c:c0:0b:98:
36:f1:4d:b7:a2:42:34:c4:69:62:3a:d6:bb:4d:41:
59:66:d0:d5:b4:e0:a3:27:1e:cb:7b:fb:50:53:cb:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EE:97:1A:EC:E2:4C:8A:54:AB:60:68:8E:9C:37:B9:94:F5:0D:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.crl
X509v3 Authority Key Identifier:
keyid:4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.52.0/24
IPv6:
2602:f73c::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:09:46:2b:07:e9:98:bf:91:17:29:0d:42:0c:55:5d:64:69:
6a:ed:1b:6a:ab:d8:ee:a5:c5:27:f4:c4:e8:32:2a:6d:fd:68:
c0:fe:ca:d6:67:8c:98:d7:da:4e:54:7b:60:03:10:3d:e0:b8:
58:8f:3e:dc:e7:e3:d0:9a:bc:e2:72:c5:76:ce:43:75:ce:e4:
ab:1a:06:b8:c3:6a:1d:e0:74:b6:fb:6d:03:a8:aa:b0:03:eb:
07:ba:53:71:06:28:d6:95:75:6a:c8:1b:34:0f:1f:77:9c:05:
b7:ce:77:8d:c5:55:fd:9e:52:a0:0d:7a:b5:10:9e:ef:27:28:
89:f2:9c:6d:43:d1:9b:23:b0:2e:8f:84:76:d4:97:d2:46:03:
56:c4:5e:c3:a5:a3:a6:93:4b:ad:4a:75:e6:68:fe:f6:d7:96:
cf:c8:d5:01:00:86:98:ff:ed:4a:3f:e7:c2:e3:b1:82:80:f9:
83:86:a6:87:ae:d1:b3:44:72:28:b2:44:c0:56:4a:64:40:cf:
b4:85:a6:20:1c:61:ab:31:e1:0e:56:51:1a:ac:84:34:83:ef:
9b:0d:9e:4d:fc:25:d5:87:9d:53:52:f8:1b:87:6e:5f:44:63:
68:48:9c:ee:1c:cd:10:e5:71:b9:d7:9f:2b:8a:6a:85:89:04:
11:90:87:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:01 2025 by rpki-client on console.sobornost.net