Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36f3a17e-49b5-3cc0-b862-8eaaff9f54b7.roa
File: 36f3a17e-49b5-3cc0-b862-8eaaff9f54b7.roa (raw, json)
Hash identifier: 2dyijXlDB/xGry85NDIX0i0hhvu2xV0iX00NIhADXxQ=
Subject key identifier: 45:00:A2:07:8C:AA:39:AD:78:79:0C:25:26:CD:EE:F1:58:19:A2:43
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584902EC2B98CE8F5C0DA0B87F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36f3a17e-49b5-3cc0-b862-8eaaff9f54b7.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 35994
IP address blocks: 23.202.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2b:98:ce:8f:5c:0d:a0:b8:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=2512a2f1-4d1e-4013-b5d7-c1e6e3efa86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:bb:57:3c:a0:4a:4f:e0:5f:b2:0b:46:e5:
db:c7:fd:27:17:5a:ad:d3:5a:ee:cd:24:7a:c5:d9:
f0:c8:c9:c5:9e:4c:e5:f5:06:ad:15:b2:ff:6a:a0:
bc:f3:cf:99:3a:c1:cf:fa:d4:44:dc:aa:60:4e:44:
44:6c:a5:4c:e2:2c:16:c9:53:12:12:cb:66:2c:df:
cd:3b:76:57:04:6c:f1:14:a5:25:6d:2d:ea:4a:f7:
e7:2e:6a:89:64:8f:f8:87:b4:67:bd:40:17:49:bc:
76:87:d0:12:7d:fd:4d:25:06:5a:e1:55:ac:84:60:
d7:53:67:c5:96:98:17:7d:41:7f:67:7e:1e:f4:af:
01:4f:3f:db:76:f2:23:4b:16:bc:9d:89:49:69:13:
a3:08:56:c6:60:c4:e6:f6:8e:4b:c8:dc:a0:9d:99:
e8:82:52:cd:2f:97:1a:96:46:8b:a7:18:6c:63:ab:
19:c2:f2:b0:a3:14:c2:28:13:bf:65:26:f6:97:f7:
30:1a:9c:8f:bc:0f:81:cf:bb:cd:ab:fc:f3:36:fc:
3b:e0:97:13:63:19:54:76:58:01:01:38:2a:15:ad:
42:96:e7:e1:49:af:05:3c:17:5f:2b:03:c0:7f:98:
b5:a2:8b:89:56:a9:f9:ff:44:eb:31:c9:df:66:2d:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:00:A2:07:8C:AA:39:AD:78:79:0C:25:26:CD:EE:F1:58:19:A2:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36f3a17e-49b5-3cc0-b862-8eaaff9f54b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.202.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:56:c3:e5:09:bf:15:fc:cb:d0:be:a8:36:cf:78:e9:aa:76:
ad:55:36:5a:fd:c6:86:47:66:1e:e0:24:05:8c:62:b2:b0:54:
38:69:50:a3:57:bd:6e:c6:69:15:55:7c:6a:e4:e2:5b:36:3f:
4e:c7:06:bf:14:72:85:89:f3:28:0d:1b:c1:ab:4a:d7:b0:f8:
6b:33:40:76:78:54:7d:12:fb:0b:b2:91:c5:ff:8a:d2:e7:da:
6b:e8:ea:e3:47:6c:12:e6:4b:d0:6b:89:cb:da:0f:bc:4d:a8:
5e:78:bc:b0:99:30:5a:a4:7c:1e:96:d0:a3:fd:71:90:89:76:
1e:f9:cd:6d:49:c5:6c:ec:f5:d0:f0:a0:69:82:a3:96:35:75:
d9:99:05:ea:d5:dc:32:01:7f:2f:23:93:47:72:17:69:e0:41:
4f:55:9e:97:1c:de:64:55:ac:b5:a9:a9:51:74:52:36:51:94:
5d:1f:2e:8f:6c:ff:3d:86:d1:ae:08:78:eb:ca:47:a6:27:af:
b8:f9:b0:ad:76:78:e7:9b:f7:1b:b5:d3:71:d4:30:2c:bc:a8:
56:29:c3:5b:b2:67:2a:c1:02:1f:13:92:c2:73:84:67:04:25:
ec:e9:62:36:42:ef:d6:35:94:35:db:de:2b:f7:6b:cd:8f:4f:
a0:56:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:55 2025 by rpki-client on console.sobornost.net