Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbc901f-4949-30c7-870a-f82f6f0660c4.roa
File: 4cbc901f-4949-30c7-870a-f82f6f0660c4.roa (raw, json)
Hash identifier: lfQESJAdmcF74OreGAK1lOeXb5F3YFvwfrHNv/MZFF0=
Subject key identifier: 2B:59:EA:03:A9:73:7A:90:3F:95:7A:0C:3E:BA:07:39:5D:54:64:D4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849833A1082C02BD20DA1D1D280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbc901f-4949-30c7-870a-f82f6f0660c4.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16625
IP address blocks: 23.197.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:3a:10:82:c0:2b:d2:0d:a1:d1:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=12a5ecd7-1eb2-466e-85c8-1db8564ef2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:03:6e:c0:d4:94:47:89:60:e3:3f:aa:cf:
18:98:9b:38:0a:15:ac:66:1f:15:1d:30:64:da:a1:
df:01:0c:8c:91:15:cc:de:10:6f:cb:20:9b:98:cd:
dc:85:85:67:b9:70:3a:e8:96:83:62:45:66:25:b6:
4e:4e:35:71:56:07:98:97:ab:38:52:ae:4c:f7:cc:
f9:73:5d:a6:a4:1a:16:0e:bb:ab:84:5c:49:4b:b6:
58:43:fc:4e:b8:1b:b1:da:cb:ce:8b:5a:54:c3:18:
18:b6:e0:e2:f5:a7:ba:5a:d3:6f:c9:3c:f1:b2:b2:
e9:93:fc:29:dd:28:70:cc:59:f3:bc:c8:06:e9:f6:
2b:1a:27:57:74:c1:46:73:4c:9f:82:f1:0a:95:88:
24:d0:ab:d9:87:67:8b:e0:d6:8a:14:66:86:e4:48:
ea:bf:96:d7:f2:2d:02:cc:7f:0d:7a:a2:bf:69:ff:
b1:de:b0:cb:43:16:7c:81:62:92:03:75:ee:ba:7b:
10:f1:68:6a:d1:6a:ae:8a:c1:34:53:b8:bd:2d:63:
61:89:3d:22:8d:16:18:71:55:ba:cd:fa:a0:32:d1:
b7:15:89:08:f7:b0:d9:8c:72:89:e2:09:82:57:37:
88:ac:03:77:86:76:ab:df:bb:e5:fb:bb:f3:e0:6e:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:59:EA:03:A9:73:7A:90:3F:95:7A:0C:3E:BA:07:39:5D:54:64:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbc901f-4949-30c7-870a-f82f6f0660c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.197.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:77:1c:fb:1e:64:4c:49:32:bd:4d:c8:4d:f2:8d:bb:82:e7:
24:a2:37:a6:fa:91:3b:f2:3e:58:6f:ff:4f:88:ce:d4:91:f9:
23:dd:b8:a8:27:16:19:95:a4:ab:65:07:ff:fe:64:7b:c0:40:
04:fc:54:db:c1:6b:15:77:36:26:61:2e:df:d4:51:e9:57:f1:
7a:e6:e7:69:a4:5d:67:7d:78:d8:c5:f5:c3:15:2e:dc:08:2d:
be:eb:ec:74:7a:07:48:13:47:52:c6:c1:d9:41:0e:5b:04:ac:
08:3e:8f:59:56:ca:0a:51:af:e2:93:b1:17:69:de:51:0a:97:
84:f1:92:35:dd:69:c0:f7:60:7a:93:79:41:09:0f:0a:61:2a:
73:22:79:39:96:6b:8b:3d:10:65:14:3c:2c:2e:03:d6:4f:4d:
ce:e5:02:55:c5:5e:57:47:0c:cd:44:81:47:65:19:ee:be:2f:
f5:01:c5:cb:fd:7c:a3:97:e8:0c:3d:87:d3:f6:02:59:b2:df:
12:63:7a:5e:7d:0b:a8:ce:d7:d7:50:3f:7c:68:cb:d8:2f:d6:
26:e3:85:18:b9:7d:ed:a3:b1:5b:f2:cf:d8:28:49:e3:a2:f7:
80:e5:e8:f9:01:d6:0e:56:1d:0a:89:d8:75:56:9b:af:bd:0a:
d3:35:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:59 2025 by rpki-client on console.sobornost.net