Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21e00e69-2c12-36cd-bdeb-7b6c72777099.roa
File: 21e00e69-2c12-36cd-bdeb-7b6c72777099.roa (raw, json)
Hash identifier: Y0n9MCjYMgDMo+VUyTzsYbbnJZOvfNY7qab594kIbi8=
Subject key identifier: 38:0F:7C:80:C9:9B:1B:52:D6:7B:90:B6:FB:CA:C0:BA:E5:F6:B3:DD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848C9B0E0F0B29F224E3249EC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21e00e69-2c12-36cd-bdeb-7b6c72777099.roa
Signing time: Thu 06 Feb 2025 02:00:39 +0000
ROA not before: Thu 06 Feb 2025 02:00:39 +0000
ROA not after: Wed 07 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.218.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:b0:e0:f0:b2:9f:22:4e:32:49:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 6 02:00:39 2025 GMT
Not After : May 7 01:00:39 2025 GMT
Subject: CN=65fa26bb-2e58-4b69-9094-dab3071a7c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:47:0d:6f:92:40:95:f7:39:d9:58:35:f6:
66:67:7c:59:dc:7a:c3:0d:2d:e2:dd:7a:80:e1:cc:
cc:39:a7:76:bb:77:da:48:5a:d1:3b:0a:76:fe:24:
8a:18:29:9f:12:24:9c:71:40:4c:88:fe:d8:0d:88:
8b:a0:27:76:52:d8:8f:22:5b:d5:e5:9a:62:d6:5f:
de:d3:a4:07:11:41:7d:f5:fc:aa:7a:cb:22:51:41:
f8:b3:87:8d:9c:aa:00:e1:6d:70:0e:5c:04:68:cc:
e9:91:d2:dc:60:a7:2c:64:ef:72:3d:c7:8b:e7:b9:
f4:e0:d7:07:40:2e:d3:be:d0:2d:06:e6:cd:2d:97:
66:97:19:48:ef:fc:46:d7:a9:d4:ce:f6:23:af:17:
f2:ca:e9:50:b1:28:5a:4e:ab:da:67:a7:0f:55:a4:
73:30:e0:3a:da:0b:9f:ab:a1:a3:10:28:d3:10:6d:
e6:da:06:3d:e9:b4:97:19:01:37:36:c7:4b:e9:aa:
55:e1:e2:cc:0f:0a:4c:3f:ce:a9:99:1e:d9:cb:dc:
4e:e8:2b:1b:46:54:c8:66:ea:42:92:3a:0a:56:7d:
26:70:dd:b6:98:b3:48:6f:70:4f:c8:a6:4c:5b:a2:
3c:e5:7f:a5:bb:02:ca:6f:ef:61:3b:d4:84:52:a3:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0F:7C:80:C9:9B:1B:52:D6:7B:90:B6:FB:CA:C0:BA:E5:F6:B3:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21e00e69-2c12-36cd-bdeb-7b6c72777099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.218.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:30:ab:c2:34:b5:be:16:4f:76:8b:d8:93:42:5a:2e:eb:6a:
db:f5:71:ef:b1:97:ae:95:47:07:d9:28:66:18:d7:0a:ce:e5:
ca:3e:74:95:6c:7b:64:bb:e1:a4:df:9c:6d:11:c3:54:70:74:
f2:3b:ec:08:27:d2:1e:1b:a4:17:b4:20:72:89:56:61:15:ec:
ee:8d:86:87:94:f0:1b:f9:0f:ab:dd:35:8a:bc:05:5c:7f:f2:
2a:cf:de:46:33:cb:f6:b3:7e:2c:bb:98:ac:6c:e8:c1:96:7c:
9b:c3:c5:0b:eb:89:2e:1b:91:11:5e:8f:34:67:b0:e1:31:ed:
0e:16:9b:4e:27:60:5e:d5:62:70:0b:7d:7b:77:f2:b1:98:55:
9b:27:77:d8:fc:f6:38:3e:bb:b1:8e:73:3a:a8:35:54:fc:eb:
52:08:93:88:36:24:db:a5:ea:f5:97:ba:4b:d6:27:45:c3:de:
8f:23:2b:9a:87:e9:c3:ad:ec:ef:af:12:8c:4a:de:9e:5c:8c:
0c:eb:98:7e:b3:2a:f9:79:46:ad:25:33:72:c8:a8:26:80:85:
76:39:59:96:15:f6:bb:36:95:b4:0d:26:b1:24:5e:a5:f3:be:
55:88:bf:39:c8:ad:05:aa:e3:d6:92:47:74:63:b3:ca:45:0b:
39:d7:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:38 2025 by rpki-client on console.sobornost.net