Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa
File: 8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa (raw, json)
Hash identifier: Pu8bUyAeM/5yfCgiQKM12dqHavveCmUb/mK2mHfUXgg=
Subject key identifier: 05:65:5D:17:10:AF:AC:96:81:29:C8:66:51:A1:9F:E0:A9:9F:C7:77
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858497279C4098C0C48599F310680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 20940
IP address blocks: 23.214.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:c4:09:8c:0c:48:59:9f:31:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=34e944e6-1a80-45ba-82d6-2877482308b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:f5:a6:ac:d4:2e:33:6a:df:16:59:f9:da:
0f:53:f7:3d:87:29:78:74:84:2f:e7:3e:1d:9f:31:
09:15:df:5f:99:79:69:d1:7c:fd:a4:bf:84:85:7e:
a7:09:10:cb:54:f7:13:17:62:bd:ba:07:f8:a1:a3:
cd:57:84:9f:c4:b1:f6:3d:35:68:69:c3:e4:aa:50:
f5:4a:3a:ee:15:bb:2a:45:1d:f4:2e:9d:4a:4e:c3:
e9:64:8c:62:41:b3:3e:9a:57:67:33:36:66:26:4b:
d1:33:db:cf:d4:11:fe:2a:6a:29:83:3f:7b:56:81:
c0:b6:d8:01:6d:1a:c0:ff:52:8c:67:49:51:98:0b:
a0:4b:9f:3c:31:e2:cc:cb:61:9a:8b:e2:f7:61:24:
62:c2:89:50:ae:6e:d2:b5:ba:26:af:40:10:36:20:
5f:4a:d4:93:51:63:59:f6:ea:9f:ee:a1:03:eb:f1:
53:a9:19:80:27:a9:f3:1d:b4:ce:04:b1:32:ff:c3:
29:68:4c:7b:46:f9:ee:29:38:e2:c9:a1:32:7d:b0:
b2:2d:fc:d2:f6:3d:9f:73:1e:fc:87:80:19:b3:bf:
26:49:36:1e:ad:df:31:4d:a8:bf:bf:d0:6d:75:70:
8d:cd:ac:ec:f9:e6:ba:f8:ed:cd:4c:a7:63:ed:3c:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:65:5D:17:10:AF:AC:96:81:29:C8:66:51:A1:9F:E0:A9:9F:C7:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.214.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:1f:83:23:e0:63:32:8d:7a:50:e1:1b:d6:9b:7b:44:5d:68:
50:65:3d:9e:8f:78:74:15:cf:c5:d0:ac:9e:17:86:22:31:94:
43:88:5d:e5:7c:fa:26:0b:b4:b5:65:37:75:19:05:f2:44:14:
7f:4c:c4:2b:48:73:6e:c7:15:e8:b2:f6:c0:51:33:86:fa:a6:
ac:c6:55:bc:ea:54:3b:3d:37:c5:29:5f:c5:60:9a:7e:3c:a1:
c8:88:31:03:2f:3e:66:29:cc:60:bb:89:bb:14:3b:4a:69:f5:
27:23:f3:d3:85:3a:94:5c:5a:ad:84:ea:d9:67:15:ea:e2:77:
4f:cf:75:54:5f:ff:09:35:04:65:36:57:23:38:65:e3:96:2a:
8d:8d:b6:ff:8e:63:89:77:69:0d:26:87:f0:fe:71:58:e7:d8:
81:1d:88:3d:fb:d7:ed:11:a1:fa:5c:73:48:82:5c:ad:48:2c:
4b:08:38:ce:d0:87:e4:03:2e:e0:be:84:c8:30:33:ed:e9:56:
63:b8:a7:a0:f9:32:7a:2b:98:f9:de:44:0d:4d:53:4e:58:00:
28:50:4a:55:91:b2:bb:0e:05:62:ab:8e:4e:54:63:18:2c:36:
bb:f7:45:b0:26:bd:79:a4:59:1d:46:ce:09:d2:13:13:fc:94:
ae:53:a7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:25 2025 by rpki-client on console.sobornost.net