Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38621224-05a9-3246-879f-c8e159c8f3c3.roa
File: 38621224-05a9-3246-879f-c8e159c8f3c3.roa (raw, json)
Hash identifier: f+Wkpu8M5TGNJloGf40W9rWCyrNqgRBw1RRmqSYMR24=
Subject key identifier: 3B:3B:97:C2:08:EE:45:43:2E:70:E6:DA:BC:8A:FD:6F:04:C7:A1:7A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858495ABEDB252AB721A008A0BF60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38621224-05a9-3246-879f-c8e159c8f3c3.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 16625
IP address blocks: 23.40.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:db:25:2a:b7:21:a0:08:a0:bf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=f6461f06-1d1d-4e1a-b1ce-abeed35189e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:11:6b:42:6b:59:17:69:af:43:fb:1a:8b:eb:
40:7a:c2:c1:50:7e:97:98:3c:07:db:7b:c5:a1:a0:
d3:1f:7c:be:be:cd:af:63:bf:0e:d6:a7:8a:60:c8:
d6:34:fe:ae:b2:13:27:c8:31:ee:c3:11:20:20:99:
2d:9e:3c:d8:10:59:fb:9f:2b:c1:ee:10:b5:64:ee:
ea:c0:ab:92:2c:6b:3a:b9:77:da:73:72:fa:43:ce:
48:d0:f2:8a:56:23:6a:fc:b4:31:52:ab:8e:35:d2:
ed:7b:53:12:17:dc:f7:ac:f7:45:08:b6:30:8e:18:
b7:84:24:7b:e6:2e:59:16:fb:e2:b3:45:1f:b1:50:
17:41:3f:d7:e2:d1:37:05:98:6b:5e:bd:94:cc:06:
d7:26:dd:65:46:14:56:ae:da:12:09:ac:d0:4c:c6:
b5:d3:30:af:5d:fc:71:b2:3e:b4:9e:57:27:ab:a2:
d4:80:eb:30:9c:48:2e:6d:41:4e:92:12:0b:0e:a6:
82:19:80:eb:31:59:9e:5c:70:a8:6d:a5:40:49:1b:
f2:74:f8:1f:81:f8:6f:6b:b6:9d:e9:78:a9:83:62:
21:3b:24:a9:33:59:f6:0b:e2:c7:2d:2e:70:51:21:
be:40:7a:25:08:be:d5:78:af:1c:80:cd:7c:0e:14:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:97:C2:08:EE:45:43:2E:70:E6:DA:BC:8A:FD:6F:04:C7:A1:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38621224-05a9-3246-879f-c8e159c8f3c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:f8:99:23:94:bf:a3:8b:20:c4:3f:87:61:da:0d:49:66:c5:
e3:4b:36:13:93:fe:88:c7:b0:d8:53:26:f9:ae:ab:16:16:02:
98:f0:ed:d7:ff:49:cf:1c:c8:b7:93:a8:7b:ab:e2:9d:9a:c7:
40:b6:f5:4a:f1:fa:ae:1a:2f:d3:7f:f6:9e:b1:64:e9:0d:19:
5c:b6:2c:cb:89:04:a0:13:4a:4b:5c:81:a4:47:d3:97:29:7f:
cb:0e:89:ee:92:97:84:c8:c9:a9:de:30:68:56:69:7a:d0:3d:
22:52:7c:88:d9:7a:5f:2b:f2:28:8a:4c:39:97:be:f1:f9:91:
56:2b:0c:77:cc:0a:c7:54:be:66:88:dd:50:be:cb:c9:98:bd:
8e:1d:c5:d6:c7:2a:75:3d:9e:6a:8a:6c:0b:b3:1b:d7:a4:95:
bd:b9:33:40:fc:e6:c6:d2:d7:bf:95:8e:6c:f8:df:5c:51:f9:
bf:0d:10:a6:ac:0c:86:5e:34:f9:9a:91:99:f0:39:90:6e:3f:
08:00:5b:69:5e:5b:bb:3f:10:63:85:87:90:ca:2f:41:a9:2c:
7b:42:f5:fb:63:f2:83:76:0f:e3:a9:26:8e:3e:c2:44:69:fd:
43:dc:6f:e7:54:04:ca:2c:a8:0f:6b:b7:1e:14:24:a3:01:6c:
b1:79:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:55 2025 by rpki-client on console.sobornost.net