Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
File: 1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa (raw, json)
Hash identifier: qfwgigPacJj7LN7UgqhHTsXVBhkSqTihSTGJzYuRW54=
Subject key identifier: 8C:63:B6:62:E2:94:C4:3E:87:DC:D1:78:3E:69:C7:93:F7:5B:8E:97
Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial: 010D0C9F432858495EEEE7B502F7976CBCFEFE00
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
Signing time: Mon 31 Mar 2025 13:00:59 +0000
ROA not before: Mon 31 Mar 2025 13:00:59 +0000
ROA not after: Sun 29 Jun 2025 13:00:59 +0000
asID: 964
IP address blocks: 23.140.96.0/24 maxlen: 24
23.140.97.0/24 maxlen: 24
23.140.98.0/24 maxlen: 24
23.140.99.0/24 maxlen: 24
172.111.12.0/22 maxlen: 24
204.9.36.0/22 maxlen: 24
2602:fe54::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:ee:e7:b5:02:f7:97:6c:bc:fe:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
Validity
Not Before: Mar 31 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=5a3dabe3-6bde-4ef7-be8d-508c019783ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:f1:84:7a:e3:bf:63:24:56:7e:0d:22:de:
c6:25:c2:47:57:df:8e:54:81:8a:25:af:e8:57:4e:
99:f9:52:18:af:ed:d8:24:7b:90:dd:22:0c:92:e7:
f4:e5:46:ee:6e:ba:28:a3:3a:e9:15:a0:07:3c:c6:
39:e5:c4:a0:1f:65:19:e7:03:8a:0a:b7:cb:36:27:
62:dd:b0:e2:83:c6:dd:e9:13:fa:18:dd:a7:bf:ef:
59:90:57:53:65:08:08:5d:6c:cb:a5:67:36:cb:d3:
75:fe:67:f7:af:22:7b:c2:69:56:25:f0:5a:08:ee:
f9:92:e1:1c:ad:e8:35:28:b4:eb:e3:42:ab:15:b7:
1a:c7:d4:90:bf:2f:0b:cb:d0:97:39:9a:4d:52:4c:
b7:41:c2:2b:88:6c:05:ca:ac:8e:ae:38:97:96:39:
93:c4:c5:5d:07:f6:44:76:60:d4:e4:1c:21:5c:b4:
2f:0b:3f:dc:9f:01:24:f6:54:c0:c5:bf:f8:96:d0:
21:d0:6e:5f:46:8e:27:3c:2c:37:56:8e:6d:f6:8e:
ad:d3:2b:8f:28:d5:c4:70:0e:e0:7a:47:09:00:e1:
45:0a:a8:7b:e5:fe:58:49:11:3c:8b:05:23:81:cd:
6c:d4:6e:10:91:1d:de:6a:2e:72:dc:f7:a9:13:68:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:63:B6:62:E2:94:C4:3E:87:DC:D1:78:3E:69:C7:93:F7:5B:8E:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
X509v3 Authority Key Identifier:
keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.96.0/22
172.111.12.0/22
204.9.36.0/22
IPv6:
2602:fe54::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:20:0d:ed:62:f2:22:b9:03:dc:ae:71:19:a2:49:c9:a0:35:
32:d7:f1:8b:f3:76:63:47:81:d0:33:77:70:e9:ad:16:8d:ec:
6b:ff:b8:e5:48:99:01:79:54:21:da:e5:26:60:0d:64:79:86:
3c:d5:46:6c:f8:c9:95:f2:70:c0:17:ab:91:a0:52:b8:61:04:
46:b2:ca:49:77:e8:73:35:bd:d9:f5:3d:fe:b8:34:b0:13:3e:
7c:64:96:6c:21:68:0f:32:61:d4:75:5b:c4:1c:81:25:49:0d:
90:d5:37:2d:c2:4b:14:ac:97:3e:85:47:50:a8:53:45:31:e3:
4a:79:d0:97:d1:d7:9f:b0:7c:9e:3f:96:83:d8:2f:85:2c:07:
7b:4a:33:15:81:18:2b:aa:7d:77:74:82:bd:dc:12:30:15:fb:
24:c5:d6:75:80:07:88:ea:dc:4d:6f:2a:e6:af:d6:7c:6c:47:
d1:97:77:d6:c0:e1:15:a2:9b:44:7a:39:2b:ce:4e:92:99:f1:
51:8e:ba:2d:6d:18:6c:a6:1d:f9:db:ed:a3:39:00:34:58:68:
92:57:d6:d5:2a:e5:b8:ad:0d:7a:ab:49:28:f2:31:59:29:a9:
de:93:03:04:31:3f:97:e9:e8:1a:72:d4:82:e9:64:df:af:92:
f5:3d:b7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:30 2025 by rpki-client on console.sobornost.net