Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e33a5e7-9c5e-3cf5-abb7-79dbee56623e.roa
File: 3e33a5e7-9c5e-3cf5-abb7-79dbee56623e.roa (raw, json)
Hash identifier: /Nk3rXJs88dClTj3dl8HF4ZQ/jdjcpocJ4AFr0Lda/o=
Subject key identifier: B4:02:4E:1B:4F:B5:B1:11:0C:34:9C:67:FC:97:B8:CA:81:90:F9:5C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BE8642EDC6C1E8686CF4AE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e33a5e7-9c5e-3cf5-abb7-79dbee56623e.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.217.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:42:ed:c6:c1:e8:68:6c:f4:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=48062ead-0fb8-4e89-bcc7-bce5968cb9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:63:0c:0a:99:12:22:82:68:cc:eb:f3:ff:
65:74:2e:27:49:a8:1b:e6:46:7f:c1:68:31:88:01:
b0:0e:31:99:47:d4:e3:04:fe:0b:6e:50:dd:43:c5:
e2:eb:fc:1f:bf:fb:c8:76:2e:bb:f6:30:b8:b5:cb:
35:6b:b6:28:3e:05:56:fa:8c:28:f3:51:21:a7:13:
13:ef:06:ef:ca:c9:76:ea:89:3e:cd:d2:e8:d9:f4:
b1:d1:be:07:b7:69:22:fe:7d:e2:e3:61:5c:d0:b2:
19:4d:82:bc:18:b9:0b:42:c8:97:f0:7f:30:67:46:
81:4e:18:d8:cd:d8:9d:d6:82:7e:62:1f:8f:7e:e9:
dd:1e:ed:da:fe:f4:cd:51:d4:89:ee:32:8c:b2:a6:
b6:fa:5d:30:29:db:16:0d:a6:f8:a4:0b:38:2e:c3:
94:f4:cb:9e:f2:67:ba:6f:7b:ef:94:82:b0:8a:9a:
1f:75:aa:f6:1e:65:9e:d7:fb:9e:c7:be:18:a0:a7:
38:32:2b:c6:87:88:82:ba:8a:02:df:72:3e:0b:66:
68:66:94:49:3e:c3:55:b0:f9:11:7f:6b:a9:c3:eb:
db:e6:27:a6:41:8d:f5:b8:11:9c:49:26:2b:78:67:
c6:26:9d:8b:af:b5:8e:0d:56:2b:e6:f3:c5:5a:d9:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:02:4E:1B:4F:B5:B1:11:0C:34:9C:67:FC:97:B8:CA:81:90:F9:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e33a5e7-9c5e-3cf5-abb7-79dbee56623e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:87:df:1b:80:2b:2c:d6:72:e8:1f:2f:16:39:b5:07:20:92:
db:25:8d:50:0a:80:49:fc:02:db:95:6f:0c:e0:c8:d9:41:ef:
17:06:fe:dc:0a:e4:1f:65:7a:36:2a:ed:69:f5:24:a2:55:8b:
0c:5c:21:d8:2d:ae:6c:7e:bc:00:1a:13:a2:bb:db:c0:4e:c9:
1d:a4:18:3b:0e:0a:01:10:65:cd:06:07:b0:2c:93:d2:0c:1c:
d8:e7:27:21:c2:9b:48:cb:73:ae:83:eb:85:91:ac:c5:e8:c2:
da:66:22:5a:d7:5d:98:0f:09:81:0c:05:6a:7a:73:94:83:8a:
4f:3f:c9:41:34:d5:3f:5b:3e:89:ea:ca:93:37:0b:f4:fc:8b:
c3:af:ac:57:19:51:d7:8a:d1:95:3a:20:c2:24:ae:1d:68:73:
39:87:fe:f8:68:1f:01:0a:ca:bd:26:9a:3c:2e:80:df:e5:3a:
ad:a9:9e:5c:2f:b2:61:e8:7b:04:07:29:aa:72:d6:65:25:5a:
6d:36:d3:5e:ca:3f:fa:99:d6:a4:62:af:64:74:b4:47:8f:a7:
5d:40:0e:37:12:46:bb:15:c1:5e:45:ab:49:0b:9b:8e:84:1f:
96:8e:a9:0e:52:da:30:65:e3:d1:73:84:78:59:94:a5:45:15:
dc:cc:d1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:56 2025 by rpki-client on console.sobornost.net