Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e3837c-f709-34ea-bc34-ad71e6858a4d.roa
File: 16e3837c-f709-34ea-bc34-ad71e6858a4d.roa (raw, json)
Hash identifier: 1eApoRE0Oynb+td2Hlq+t7IfviiA0f1DgXWXib4wAxE=
Subject key identifier: CF:48:C0:6C:63:E6:9E:F1:0D:5E:40:63:7A:D8:B2:A9:FF:45:73:EF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858498339F7B48FF1131FDA9DD980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e3837c-f709-34ea-bc34-ad71e6858a4d.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 20940
IP address blocks: 23.193.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:f7:b4:8f:f1:13:1f:da:9d:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=c6bcaef8-b77f-419e-9a2c-ad6f5c0e9dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:1a:57:62:86:43:d6:57:44:51:b2:fb:5b:
f5:0e:c5:38:06:52:c5:c7:63:d8:50:47:fc:dc:e9:
8c:cc:35:51:fb:27:b7:dc:67:b1:d9:b3:3a:6a:3d:
f0:f9:92:a0:1f:f2:7b:e6:03:e3:f6:2e:c5:77:36:
eb:d2:04:d7:36:26:a5:c3:25:90:f0:9a:8b:85:df:
17:8d:8f:58:40:84:77:f0:bd:1d:8d:8d:1c:b3:4c:
02:a5:ff:0b:5f:8a:b8:84:56:1b:79:45:2a:9e:4c:
39:c9:6b:f5:63:7d:eb:6d:03:b7:40:08:d1:ca:d2:
b2:e0:e7:0f:2b:63:f7:90:c9:d0:35:c2:39:c9:88:
0d:f5:fc:ec:b5:c0:0f:2d:0d:9e:1c:04:4d:ad:01:
86:a6:0c:2a:8d:2d:af:74:d5:9e:49:67:d8:f9:a5:
ce:94:f1:d3:fd:08:88:3b:2e:b9:ba:b9:c4:7d:14:
8b:d6:ff:18:af:44:8a:1f:f4:96:e2:44:67:46:cf:
21:71:f3:57:a3:3e:2f:70:e6:0f:dd:91:02:30:61:
5e:87:dd:63:27:39:e8:a2:fc:26:5e:d9:d6:1f:28:
93:3e:8f:5d:58:93:b6:7b:28:96:f8:fd:6b:1e:1b:
8f:1e:0e:59:0d:1a:ae:1d:ee:b2:c2:76:8c:78:6b:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:48:C0:6C:63:E6:9E:F1:0D:5E:40:63:7A:D8:B2:A9:FF:45:73:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e3837c-f709-34ea-bc34-ad71e6858a4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.193.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:e5:f1:ae:d1:35:16:be:c6:d0:13:28:93:e5:e0:20:80:39:
38:21:73:fa:3b:8b:03:9d:9b:a5:6d:fa:16:4e:c6:14:5e:39:
1b:9f:cc:05:9d:72:c0:20:22:cf:5f:40:c0:c0:72:bc:b1:54:
3c:ae:6b:de:9a:65:96:d1:0b:16:85:07:c2:ed:e0:da:0a:94:
86:6d:59:48:c4:68:c3:9e:2e:a3:d3:59:22:18:7a:27:be:72:
f9:13:a8:5f:16:e0:20:77:42:11:38:7a:32:45:13:14:41:a3:
66:42:44:e4:e3:e9:2a:fc:76:64:1e:bc:75:6f:f9:db:c3:87:
2c:d9:84:35:d6:07:ac:00:74:be:51:87:c8:f9:20:1b:fd:bc:
54:b7:1f:08:eb:98:85:db:77:0d:d1:e8:ca:70:44:b8:e6:0a:
6d:8b:0d:27:94:97:22:1f:2b:89:d3:66:fe:7b:cb:9f:45:f8:
ee:57:eb:62:7f:70:1e:26:b0:0d:95:0f:7e:71:54:9f:49:24:
35:99:e6:61:d4:54:1b:7c:14:31:96:fd:9f:04:84:f6:cd:14:
1e:a8:b7:fb:f3:04:0d:67:25:4e:55:59:31:76:dc:f6:e6:6c:
ed:40:4f:88:5d:31:56:ac:a0:4b:e8:35:09:67:86:e9:6d:91:
36:b1:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:36 2025 by rpki-client on console.sobornost.net