Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32734a89-1d28-3b8f-b405-c7e1883c6881.roa
File: 32734a89-1d28-3b8f-b405-c7e1883c6881.roa (raw, json)
Hash identifier: pmD+hju3J37n0VtJuQGtnGM7Dykui7kMlZr2T6ggC+4=
Subject key identifier: C7:37:A0:E5:8A:B1:F3:49:1D:C4:B4:FB:3A:C1:A9:D4:EB:EE:8D:A8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858498339F8502B2347A05C4A9B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32734a89-1d28-3b8f-b405-c7e1883c6881.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16625
IP address blocks: 23.194.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:f8:50:2b:23:47:a0:5c:4a:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=d1f9d62b-80ba-4cb3-a147-08c9ff7595ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1b:71:34:3e:8c:37:ab:98:81:05:bd:aa:b0:
88:56:73:44:90:6a:be:9c:41:42:ec:27:5c:5c:df:
c1:f8:b1:d1:32:87:db:98:6f:0d:09:c8:69:f3:f9:
e8:6b:72:72:4c:bc:bb:54:51:12:76:fc:01:3a:d3:
71:2b:83:1c:88:27:ad:be:8e:49:7d:56:ed:1b:ec:
78:60:77:a8:b5:37:61:67:fa:60:f8:54:1e:10:3e:
f8:08:85:08:41:60:57:03:56:c2:48:57:f9:fa:52:
0a:0b:ee:da:aa:a2:8e:d1:81:42:ea:bb:59:a2:46:
c4:5f:3b:dc:ad:82:49:d7:2c:ce:d8:a1:dd:4f:ac:
69:90:a6:db:62:f9:80:c0:5c:77:1e:e0:51:9f:8e:
ff:7e:1d:94:94:38:36:d9:90:df:25:ff:51:76:71:
b1:65:ed:4c:1f:09:c3:6a:68:2a:1d:33:4f:16:1e:
f2:d1:bf:77:a9:7a:24:b1:db:39:8e:ad:2c:a0:fc:
0b:2d:77:fb:c9:81:09:6a:d8:e5:d3:4f:26:a8:fd:
84:35:31:ec:d1:cb:03:0a:e6:ff:cc:c4:bd:e2:2e:
da:3a:30:3d:7e:f0:5e:ad:bf:9f:b6:51:e8:4a:0b:
4a:fd:81:a4:54:71:3c:b9:5c:9b:0d:49:f5:03:8a:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:37:A0:E5:8A:B1:F3:49:1D:C4:B4:FB:3A:C1:A9:D4:EB:EE:8D:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32734a89-1d28-3b8f-b405-c7e1883c6881.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.194.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:0d:02:53:8b:96:ed:ce:94:e0:1f:61:70:75:d7:d7:cd:15:
c5:30:ee:5f:8b:b5:e4:f2:0a:59:a5:a9:80:e0:65:46:54:bf:
8b:78:74:c8:d8:cc:36:ed:59:80:d1:1f:e8:2e:c1:89:d0:f7:
52:1a:cb:28:0b:ae:1a:ff:10:76:a8:de:36:fe:0c:24:17:66:
8f:1c:42:79:a7:f8:3a:44:fe:05:f5:28:a1:30:29:bb:01:6b:
b9:39:2d:51:74:cb:a2:0e:f1:0f:f3:d1:4a:34:c5:9e:28:7d:
d8:c4:11:65:f6:b9:50:cb:62:38:c6:57:f4:1f:04:bb:95:16:
f0:13:9e:4b:70:21:14:8d:0a:90:71:11:ed:f5:d6:fe:0b:99:
f9:be:f6:2d:36:e8:c7:76:59:83:25:69:3b:e8:c8:51:8c:e7:
b8:72:05:45:04:54:97:c2:e0:71:f5:cb:49:76:98:e2:0f:9b:
2a:28:8b:4e:ec:17:37:54:03:41:3f:52:49:f6:3a:92:0b:11:
25:93:cc:55:25:0d:d9:fd:b8:e6:33:38:c2:ad:4c:b7:e5:6b:
31:7c:11:7e:31:d6:4b:f1:98:53:ee:f0:69:6e:e3:75:cd:26:
82:ef:9d:f2:f7:84:0c:86:1b:dc:89:2d:2e:10:47:a6:f3:79:
02:16:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:41 2025 by rpki-client on console.sobornost.net