Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa
File: 487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa (raw, json)
Hash identifier: QmQmUt9XK69Zi7VCVQs8RRXTP3NBX9Abufl1wDXpSgw=
Subject key identifier: 8F:8B:1C:B8:C5:6D:75:5A:F1:00:CF:74:A7:E3:E0:50:C2:09:AC:DD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858495ABED8C4F6968E0E805CA600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 16625
IP address blocks: 23.38.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:d8:c4:f6:96:8e:0e:80:5c:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=882a9128-2053-429b-b813-223ef3bacaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:78:c4:9a:c4:2d:f5:ea:ce:52:c4:fb:c2:
e4:2a:54:84:79:85:5e:e8:7e:37:40:b2:bb:d9:ea:
0c:a6:dd:b0:a2:3a:ff:b9:b5:b2:4f:4e:5d:f7:02:
34:23:80:48:f0:ad:94:62:88:58:10:74:63:51:b8:
ab:58:a2:77:10:17:b0:d9:ee:aa:b6:4b:47:57:27:
b0:e9:80:86:8c:63:8a:72:47:29:42:bb:e9:05:ad:
8c:d4:3d:5f:92:24:c0:1b:36:ec:34:66:d1:41:4b:
6d:40:8d:b4:27:c5:3f:7d:80:03:42:69:b0:3c:64:
27:cf:aa:ce:f7:d5:7c:5c:d7:90:02:97:2a:e9:b3:
d2:7b:cc:a1:c8:e0:f5:88:2b:b7:b1:a9:f2:ba:6d:
03:f5:d6:a8:6f:5f:ee:49:b2:61:35:88:03:5d:29:
4d:f9:30:6f:4c:9e:5d:f0:af:72:d4:5e:70:8e:c1:
39:12:60:2b:1c:95:54:18:15:75:dc:f4:3a:23:5c:
f0:15:91:2c:1d:f1:cf:04:90:69:cc:77:ee:bf:28:
64:1a:c0:4d:78:2d:f6:28:2f:12:27:42:52:89:35:
fa:b3:ee:f7:1b:24:0e:23:5b:d5:6e:0a:fb:9d:f8:
ff:2e:92:3b:e4:77:39:08:f1:1f:0e:13:50:3b:2a:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:1C:B8:C5:6D:75:5A:F1:00:CF:74:A7:E3:E0:50:C2:09:AC:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:63:46:50:65:e7:3b:27:1d:a6:4b:05:35:0e:43:49:d1:9c:
a9:8d:4d:59:e9:c0:11:50:e8:e4:d2:75:a2:f0:a9:0c:34:94:
8d:fa:7a:1c:f9:b8:65:df:78:b5:f4:37:b3:c6:5a:ef:c8:0f:
64:e4:37:42:26:0e:a4:1e:31:4d:36:3c:9f:9d:25:20:7d:59:
fa:34:e1:1a:7c:aa:56:8d:9d:2d:ad:69:d3:1c:05:3d:8e:c2:
41:aa:12:1f:63:1d:cf:7a:cb:96:41:0e:e7:37:07:24:8d:75:
8e:fe:b3:af:34:17:9b:55:3a:19:50:ff:cb:6f:f4:1e:79:2f:
25:35:e1:36:57:2c:83:90:43:04:65:c8:d1:91:17:e8:68:25:
b1:10:61:06:b1:a9:42:73:02:ce:31:a5:13:ae:9c:39:37:1d:
99:44:d1:f6:92:02:2f:12:8d:69:78:db:5a:04:f3:9e:5e:39:
c0:ec:28:cc:4e:24:c1:f9:37:38:85:c7:04:44:84:fd:e3:99:
30:aa:18:20:68:2a:f0:33:29:31:92:bc:f6:02:3c:8e:6b:d3:
84:db:4d:b4:67:84:2f:ae:77:35:ab:c5:cf:25:97:e5:ef:e0:
ad:62:86:a2:93:1a:0b:30:a8:d9:65:3d:ca:17:1d:3f:20:6f:
bc:f9:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:58 2025 by rpki-client on console.sobornost.net