Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a809f4c-03bd-372b-9f2f-51d234b8232d.roa
File: 0a809f4c-03bd-372b-9f2f-51d234b8232d.roa (raw, json)
Hash identifier: crHLHPEUIJ3Pl7Uqsh6ITcoSVIoFlyUm5NSZuzKBL2Q=
Subject key identifier: A5:80:3B:4C:D3:54:DA:BB:42:1E:C1:EA:40:1B:A0:00:E6:C8:A5:89
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849833A1061B265DD4A88614C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a809f4c-03bd-372b-9f2f-51d234b8232d.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 35994
IP address blocks: 23.197.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:3a:10:61:b2:65:dd:4a:88:61:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=02f1c49d-3cd1-4522-8c10-4380f10b6a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:9c:12:c7:3c:9e:c2:2d:df:d8:f2:f7:76:
8a:2c:8a:06:a2:90:71:fe:49:5b:b6:a2:dd:57:b1:
b9:21:f1:21:3f:0e:19:89:6c:11:91:04:69:4b:d0:
0d:e4:6d:94:c8:e1:fc:36:f6:be:c6:f9:d6:a0:a2:
7e:30:a0:e1:c0:8b:ef:f0:d8:40:ec:d7:58:3c:0b:
a5:9a:af:03:d8:e7:56:29:a6:ba:88:38:9c:5d:0d:
d9:2e:1f:5d:74:b9:87:fa:07:89:b2:a2:8a:17:00:
d3:78:c1:6a:7b:4d:3c:21:0e:4a:70:89:4b:11:60:
f9:14:30:74:50:5a:0b:4b:0b:7e:e0:94:b7:21:fc:
17:9b:4d:ed:d4:a6:6c:8c:d1:27:d7:de:fd:10:c1:
b2:e3:09:db:8b:ec:c5:79:ea:b6:1c:9e:66:44:f9:
25:47:bc:ad:01:2b:f1:ce:7f:d0:10:d3:d9:3c:75:
16:1d:1d:ab:e0:71:d8:bc:8f:cb:59:b3:3c:af:be:
f8:7b:e2:d8:d2:31:de:75:1a:62:42:76:5e:8f:79:
6c:88:65:78:de:cc:a1:1b:f8:f9:bf:83:86:19:42:
5f:24:21:29:39:73:3c:f0:0a:d4:33:43:2f:b3:43:
cf:db:d4:de:fd:ea:42:b8:29:b5:43:1d:fa:2c:20:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:3B:4C:D3:54:DA:BB:42:1E:C1:EA:40:1B:A0:00:E6:C8:A5:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a809f4c-03bd-372b-9f2f-51d234b8232d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.197.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:0d:2c:b0:55:2b:83:b8:49:47:07:3d:5f:8f:e5:91:76:f2:
01:e1:97:6f:51:22:69:ba:20:8d:04:fc:89:94:13:1d:95:05:
ba:97:38:7c:5e:f7:44:95:df:c9:ab:bb:8f:f2:87:14:1d:9e:
2c:6d:00:e6:5b:3d:4e:5e:88:de:99:4b:55:af:9a:2a:36:05:
69:32:20:3d:7c:a3:91:23:79:1e:0a:70:be:c7:66:fc:25:84:
1c:c6:d4:f9:54:5a:06:dc:e2:66:79:d2:cb:5c:a6:1f:cb:1c:
36:9c:48:1c:8e:d2:43:3d:35:a7:23:35:e3:57:7c:4f:72:6c:
5d:31:1c:9f:c0:c5:06:cb:83:9a:cf:48:fc:71:46:db:2a:6d:
34:c4:cf:48:91:90:f6:68:1b:ea:99:e6:ee:c3:b3:49:d6:91:
8c:2e:fe:fb:74:49:ae:89:a7:9f:57:ba:40:2d:ec:9f:18:53:
ae:ff:e2:28:04:84:ca:9a:73:cb:fa:9f:d9:91:13:54:2b:13:
f8:0c:6f:c4:b1:d7:b0:82:fe:91:bc:4b:e6:ba:aa:96:a4:75:
0c:19:6f:16:6e:5d:4a:ca:3a:a6:cb:8a:ea:6e:c3:d6:11:d1:
5a:84:40:45:0a:f4:64:f4:8d:af:dc:73:dd:c6:12:3d:24:82:
c5:62:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:33 2025 by rpki-client on console.sobornost.net