Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6976be7c-837f-3d9d-afd6-e1d198bee77c.roa
File: 6976be7c-837f-3d9d-afd6-e1d198bee77c.roa (raw, json)
Hash identifier: mdaNiAk5jObdKF3XULvbEP+o+SQE/AoIdzd+fE07ttk=
Subject key identifier: E8:E7:05:33:A9:B5:C0:DF:9A:44:E6:F4:17:5E:51:00:37:17:9D:DC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584957F40CB8EA30BC47F26D5200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6976be7c-837f-3d9d-afd6-e1d198bee77c.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.197.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:0c:b8:ea:30:bc:47:f2:6d:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=8f8d563e-fd19-4b65-82ac-4dda81be05f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:3d:1f:f3:17:fd:94:c4:8d:59:dd:14:86:
d2:a7:da:8b:3e:83:dd:01:48:4e:1a:e4:f5:58:64:
58:dd:88:8c:7b:1d:55:81:93:4d:50:2f:77:18:42:
9e:bf:14:2a:b7:26:b3:85:2b:e3:d0:92:4c:3d:ab:
94:15:98:4b:ca:6f:2f:9f:b7:ad:bc:12:7a:de:30:
4b:9c:17:32:91:f1:df:81:07:3a:f6:29:03:1b:c5:
0a:71:be:42:94:15:80:c3:13:ed:89:0b:4f:d5:eb:
7b:76:30:b6:05:19:20:fc:69:04:dc:0b:92:12:1a:
0e:bd:4b:00:1d:fa:46:13:77:21:ac:0c:e9:75:46:
b3:cc:05:51:4d:03:0f:b7:f8:09:46:1f:70:2d:58:
cc:97:ae:72:48:ec:14:47:db:d8:0e:ff:5c:d0:c3:
d1:b3:64:5a:23:35:ff:87:48:6d:3a:f9:e5:bf:1d:
7b:61:89:42:e4:b8:c7:ac:6d:c8:79:e4:1a:f6:33:
72:81:11:2b:e2:f2:7f:e2:4f:37:9e:f0:bf:c8:a3:
a3:43:ce:c5:b1:91:a9:08:7e:c4:4a:50:31:6c:34:
45:bc:77:30:91:18:63:f8:eb:9f:c4:bc:ec:f2:99:
b2:cd:87:65:4a:86:82:55:47:e3:1e:02:6a:5a:ce:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E7:05:33:A9:B5:C0:DF:9A:44:E6:F4:17:5E:51:00:37:17:9D:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6976be7c-837f-3d9d-afd6-e1d198bee77c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.197.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:02:31:b4:25:5f:9b:c2:c5:42:a9:22:7b:99:4e:2f:f7:06:
a7:0a:95:a1:53:33:83:f6:f3:9d:e4:ce:2c:9f:f5:97:80:c8:
f6:96:fd:00:e7:4d:a1:ae:ff:00:9c:7f:64:41:fe:95:01:4a:
ac:e6:47:4c:31:ab:0d:97:b9:1a:37:7b:ba:c1:e9:0f:71:95:
42:81:4e:c5:19:b4:5b:05:1d:89:e2:2d:52:2c:ba:ac:5d:9d:
39:5e:e0:93:dc:9b:61:60:72:e5:f5:2b:ca:c5:29:c3:86:9d:
b2:c3:26:b4:07:a8:98:c3:d4:ee:10:90:75:11:f4:fc:5e:29:
2c:4d:07:13:fe:36:36:13:d7:01:9c:48:c5:d6:86:c0:67:be:
0f:6f:5a:32:ee:1e:7a:04:3a:f4:7f:5d:40:22:7f:ed:31:84:
a0:1f:77:9e:bd:0b:8c:71:96:03:bc:3d:a2:a2:00:64:9c:39:
cf:b2:2f:e2:f2:59:b6:83:fc:39:5d:65:16:fe:2d:37:44:30:
0d:bc:f6:10:de:a2:7b:b3:d4:cf:de:8b:23:97:3c:4c:2e:03:
f2:f5:07:63:a2:20:02:2e:e5:29:ab:2e:32:44:0f:b3:34:0e:
6a:68:0f:93:7f:ca:6e:80:70:29:33:ab:65:54:c4:94:1f:26:
5f:b7:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:07 2025 by rpki-client on console.sobornost.net