Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e2074e0-625c-369f-9d1b-e49991b9cf1f.roa
File: 0e2074e0-625c-369f-9d1b-e49991b9cf1f.roa (raw, json)
Hash identifier: pnpLusOxKeCMujKvi68CWPdMsygsqptUpme6qBuTxdU=
Subject key identifier: E1:0F:95:56:21:87:13:0D:FA:CC:8B:F7:FD:05:AA:12:C4:35:20:B7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584964846D5F24930634613CAA60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e2074e0-625c-369f-9d1b-e49991b9cf1f.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 20940
IP address blocks: 23.53.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:6d:5f:24:93:06:34:61:3c:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=49e8158b-6c8d-4f97-8b67-b90c6f213f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:18:ff:4f:07:6b:27:1e:e5:57:02:39:96:
e9:b9:52:ec:7e:6c:ef:8c:08:90:40:4f:58:79:a6:
52:4d:d9:d3:66:38:f4:c9:ba:bf:1f:ce:8c:4b:8f:
b5:48:20:84:1f:a4:96:95:5d:47:c7:ec:80:2d:c4:
87:74:07:4f:a5:f1:61:3d:48:41:0a:7f:29:02:cd:
74:ea:b2:64:7b:04:cf:ce:1f:e4:62:b3:68:be:73:
06:71:b7:5e:90:9b:0d:ba:6f:0f:ba:c0:60:3e:ef:
f1:1c:88:aa:15:87:c3:f9:2c:f3:c2:df:46:ec:fa:
07:86:77:9f:cc:23:29:0a:9c:a2:65:26:3f:d1:c2:
2c:f8:ef:73:13:0e:96:23:53:67:1a:05:fc:d6:30:
dc:50:8e:15:be:38:27:5e:8e:c7:a8:2d:84:2c:a3:
ee:c0:31:d6:d8:80:6f:08:fb:00:74:f0:e1:4d:00:
fc:49:fd:fc:35:5d:28:ab:ad:16:bc:7e:c9:e1:24:
93:9f:df:cf:20:81:7e:cd:fd:a2:c5:e6:39:f9:ee:
e6:c1:17:31:c3:98:d6:5f:c9:5f:90:9c:6c:e2:11:
9e:9c:ba:55:ae:ac:99:37:93:8f:a5:20:40:57:1c:
79:ba:88:27:a7:48:62:4d:76:61:2a:9c:a9:93:e1:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0F:95:56:21:87:13:0D:FA:CC:8B:F7:FD:05:AA:12:C4:35:20:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e2074e0-625c-369f-9d1b-e49991b9cf1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.53.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:36:7b:7f:b5:8c:f0:cb:7d:d7:3d:59:82:ad:7c:29:54:5b:
3d:f2:cb:34:0e:25:18:6e:06:9f:d3:d7:c5:99:8b:16:ea:b4:
da:e9:1a:c5:11:4b:5f:36:8d:69:1d:4b:e7:19:5b:1f:5c:3b:
25:12:5f:18:d2:6c:51:be:5a:5f:5e:b6:c0:14:61:c5:eb:39:
0f:8b:07:00:c5:62:0a:c2:af:33:18:b2:32:a8:a1:d3:b9:2a:
ff:8b:48:05:dc:ae:ba:c6:36:71:58:9f:9b:4c:a2:ef:20:cb:
1f:7a:99:d8:6e:94:38:aa:30:cf:78:29:92:2c:40:de:13:f4:
79:f9:78:3b:3f:37:ca:3d:23:55:9a:36:9a:20:10:3d:9b:c4:
67:9d:bc:6b:d2:b8:d1:5a:e7:b9:2f:a8:b5:ee:fe:eb:d0:81:
8a:73:00:9d:ca:d3:50:42:12:19:e1:a2:45:9e:6f:e9:c6:4b:
d5:5e:70:21:fa:c6:19:a4:73:3d:39:33:cb:e9:fa:6b:14:24:
71:05:f2:cf:eb:d3:fa:a4:96:17:ed:86:16:e0:7c:9b:83:30:
a0:f5:23:d7:a1:66:c1:80:07:70:d1:33:f2:09:3d:d3:26:6c:
58:03:c2:7e:ab:da:e3:13:3f:a4:3f:97:33:c9:48:d9:cb:3a:
b5:8c:0b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:34 2025 by rpki-client on console.sobornost.net