Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1af1d344-8103-318e-a208-5c1a7a8a81f2.roa
File: 1af1d344-8103-318e-a208-5c1a7a8a81f2.roa (raw, json)
Hash identifier: KQiUSE5CFgATvj0Uw5lIR/TiwGkGoXRUtcvNxNrjemE=
Subject key identifier: 73:23:44:A8:24:6A:E0:7A:AD:2D:27:96:72:FC:D8:EB:D6:2D:4F:77
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849780F1DC31E9A3B837838E6C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1af1d344-8103-318e-a208-5c1a7a8a81f2.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 20940
IP address blocks: 23.192.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:1d:c3:1e:9a:3b:83:78:38:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=ca0db78e-25b9-4e72-814a-b347d8068551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:a1:1f:b9:d8:c5:8c:8b:55:ff:fd:d1:1e:
8b:49:33:07:8b:47:37:7a:67:b8:07:53:25:10:8c:
c8:ee:95:0a:b5:a3:b9:83:52:9c:64:8d:3b:e8:de:
50:54:95:a9:e3:d0:bf:38:93:7e:f5:20:89:05:fb:
ad:64:6f:a6:05:ef:cb:1d:fd:d4:88:1a:94:7b:37:
ad:5b:b3:f4:40:97:9b:b2:3b:62:f0:99:8d:38:7a:
d1:49:0c:4d:54:30:f9:39:21:05:a7:67:4d:02:9e:
25:dd:74:cd:ae:e6:74:65:c1:64:c3:f8:c7:0c:f0:
61:10:9c:22:21:f6:97:d1:90:6f:63:f7:48:f3:a4:
46:4d:01:73:bc:d2:af:1b:fa:98:73:d4:33:dd:83:
74:1a:ab:d6:60:56:83:4f:58:83:88:7c:a3:be:91:
82:db:fa:8b:40:6e:7f:9d:1a:9b:79:75:3d:d0:28:
8c:96:68:ec:e9:5c:7d:16:a7:59:35:f8:bf:e6:6c:
e7:56:c8:a7:60:7e:2c:ff:90:45:ad:69:2e:75:6d:
60:8a:71:e8:65:85:83:cb:f0:91:a2:61:5d:a7:fc:
ed:f6:bb:27:2f:79:cd:a1:c3:b6:73:d4:31:a8:83:
33:f4:f9:44:fd:de:b8:8a:c2:53:fe:fe:d4:cd:6f:
3f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:44:A8:24:6A:E0:7A:AD:2D:27:96:72:FC:D8:EB:D6:2D:4F:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1af1d344-8103-318e-a208-5c1a7a8a81f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.192.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:26:50:5d:ff:a8:91:05:be:4a:93:23:c2:c9:70:bd:47:0e:
7b:fa:0e:cf:dd:17:19:7c:29:04:cd:91:e3:49:e3:87:3b:ae:
dd:0b:de:82:b9:f2:79:56:ac:ed:e5:37:43:19:a1:a9:08:d7:
26:97:2b:c8:ec:d8:84:3a:50:2d:27:eb:a1:37:fa:22:fa:26:
64:fd:54:01:7e:c4:1e:55:c6:58:8f:b4:74:77:4e:b5:60:c7:
25:b0:30:81:7f:17:07:c4:c1:a0:ee:8f:43:74:82:3f:76:07:
8a:82:41:39:7b:44:fe:0a:40:7d:11:f5:29:6b:68:ca:0c:c6:
92:95:f2:13:e3:51:b4:31:d2:e8:55:46:fa:26:96:80:d8:5b:
07:47:34:3b:ba:e5:8d:85:bb:26:05:3f:a0:77:46:82:84:d7:
11:60:b1:71:b4:2d:1f:cc:59:36:6e:09:7a:78:dd:4a:3f:77:
44:c0:3f:a0:8d:ca:f6:4f:c7:68:cb:2c:e4:bb:2e:89:f2:16:
0c:79:93:97:b8:d0:a9:59:2f:61:94:a0:9a:5e:64:7b:b6:31:
6b:5a:cf:8e:50:69:32:27:3d:9d:fe:38:4a:c6:fb:46:ac:32:
54:3c:c1:af:7e:59:37:2e:98:bb:db:00:64:20:58:ca:af:90:
af:8b:0d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:36 2025 by rpki-client on console.sobornost.net