Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa
File: ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (raw, json)
Hash identifier: x/sgQuhKpeoW0h8FO+szXj9qMxv8yOuUImnmUSMxYBk=
Subject key identifier: 2F:DE:12:CF:CF:FD:7C:BC:B5:FF:47:31:2B:70:8A:DB:3A:7B:08:83
Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial: 010D0C9F4328584902EC2715997052ADFD071F40
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16584
IP address blocks: 23.140.98.0/24 maxlen: 24
172.111.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:27:15:99:70:52:ad:fd:07:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=7ed7f627-6d68-4d51-8135-3c55d16a9502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8e:70:93:e3:67:8b:a0:38:8a:19:25:87:34:
84:4f:44:4c:60:a3:0d:c7:8a:a1:21:87:04:a1:8f:
00:1f:c5:8d:d5:5f:4b:d4:90:b3:c9:c4:be:23:e5:
8d:ec:4b:5f:68:7e:8b:9d:bc:53:de:94:c6:fd:d8:
98:27:63:2a:7c:70:04:67:52:18:76:10:11:03:ff:
19:1b:79:00:c5:53:76:73:f0:60:4e:f6:5c:3b:1e:
f3:c1:17:72:e5:d1:2e:b3:f1:fb:6d:34:a5:4a:66:
4b:33:8c:57:70:b0:50:cf:94:4d:45:ad:ee:29:29:
e8:fe:c4:d3:65:ec:bf:9b:28:99:26:69:75:c1:ae:
ac:49:05:4b:a4:ce:e2:ea:bc:4c:56:b3:f9:04:cb:
26:4c:9c:36:e5:70:80:8d:68:04:de:7c:fa:ed:b6:
88:14:ed:d4:0d:93:75:fd:96:b5:ef:55:0a:95:ad:
74:0b:3c:13:91:89:fb:12:40:36:40:af:f7:b4:4d:
99:67:40:1d:e5:e8:7d:60:53:79:53:33:12:17:7d:
bb:af:5a:e0:4d:f7:d1:31:67:52:27:dd:d0:7e:e6:
df:5c:1c:92:06:c4:85:0a:8e:fc:d3:d9:92:20:16:
3c:05:ed:e6:b8:53:12:a7:64:da:6f:df:9b:5a:3a:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DE:12:CF:CF:FD:7C:BC:B5:FF:47:31:2B:70:8A:DB:3A:7B:08:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
X509v3 Authority Key Identifier:
keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.98.0/24
172.111.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:3d:5e:ae:ca:ac:08:7b:d3:1b:e1:00:58:b5:aa:02:0f:cc:
b2:97:83:40:35:2b:98:76:23:e7:68:41:b3:1d:87:d6:5e:58:
17:a1:c8:e2:90:97:6b:3f:3a:e0:6e:da:4e:fc:60:5b:7b:8b:
e8:81:1a:ae:53:e0:73:22:ed:d1:4f:fc:8c:99:06:be:7b:4d:
a0:5f:b6:96:6a:62:22:f2:d0:71:b7:48:65:df:21:36:8e:60:
43:6e:63:9b:ca:8b:8c:db:a5:75:2b:a0:3e:9c:08:77:a7:16:
30:6c:8c:cd:29:9c:2b:8d:ab:43:11:56:ec:50:8f:82:a5:84:
ba:b5:96:53:2c:f0:e6:38:d1:1e:e1:31:a6:77:b5:e1:e2:75:
7c:b5:2d:ab:39:ef:e6:e8:33:5e:2a:f7:f7:f0:aa:a2:4a:15:
c9:ed:fb:c8:7f:fd:fa:e8:01:f9:44:14:6b:e2:31:79:9a:a9:
b9:29:1f:f4:14:b7:08:c6:3e:f6:c0:7c:13:5c:0b:21:c8:00:
e2:fe:c9:75:24:86:94:bc:11:d7:ea:84:79:9e:b8:1e:1d:a6:
19:1d:06:fe:1e:1a:de:f3:e1:fc:08:e2:6c:52:ec:aa:69:f4:
b3:5d:b7:4f:f4:d9:ae:4f:3e:92:35:e9:ab:03:39:25:fb:dd:
43:c1:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:30 2025 by rpki-client on console.sobornost.net