Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d1db9b3-ffb0-3495-8523-e3ca9557bd5c.roa
File: 8d1db9b3-ffb0-3495-8523-e3ca9557bd5c.roa (raw, json)
Hash identifier: KO3fbzz0PVKoqqGxCOg4q5FJ7D4xPQuwdS9g1foQw+I=
Subject key identifier: C6:27:AF:03:7E:C7:A7:1D:45:9D:A9:95:3B:BF:B9:34:73:56:71:EE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849833A0FB916B22B91ACAA5E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d1db9b3-ffb0-3495-8523-e3ca9557bd5c.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 55836
IP address blocks: 23.196.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:3a:0f:b9:16:b2:2b:91:ac:aa:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=99459c68-35b8-4f24-a104-dab13e996eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:87:46:e4:8d:81:85:2c:d9:99:70:d5:c6:42:
0f:47:74:42:8e:eb:c4:65:e6:da:de:4c:9f:0d:08:
dc:d4:cd:41:75:b0:27:59:55:a0:43:4b:92:06:07:
32:be:84:13:4b:f4:75:82:e1:ee:92:92:59:a1:fa:
77:93:dc:86:a6:18:5b:08:c1:8c:eb:25:88:dc:ff:
30:e5:8f:5d:df:a7:bb:8a:09:6d:bc:5e:f3:1f:86:
6f:e9:d8:fb:09:b9:40:93:21:cf:17:5c:b6:92:2b:
e4:49:16:94:ed:da:3f:4f:d5:07:e7:4c:89:1b:d9:
cb:e7:25:43:24:01:b3:97:e4:c9:b5:02:87:1c:5b:
9a:1f:9b:37:32:f9:ed:30:27:7c:65:1c:cc:89:1e:
c4:0d:cc:85:de:5d:92:2e:5b:23:dd:24:c7:ea:f0:
ae:be:a4:50:4d:5d:ff:25:01:d9:51:66:7b:8c:bc:
34:94:e0:5a:6f:1f:ed:2e:dd:6a:e3:de:68:5e:21:
16:db:a8:1f:31:06:00:c2:7a:fe:8c:21:62:11:02:
58:3b:a9:2d:0f:3a:a9:39:cb:9a:fb:b4:4c:5c:15:
d4:c3:34:ed:5a:7a:37:7f:59:bb:45:c0:1c:25:44:
29:aa:24:3a:e5:b4:f5:d7:1f:5f:b5:75:f4:28:a3:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:27:AF:03:7E:C7:A7:1D:45:9D:A9:95:3B:BF:B9:34:73:56:71:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d1db9b3-ffb0-3495-8523-e3ca9557bd5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.196.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:a7:6b:af:d1:18:dd:53:cc:f8:a1:24:46:90:7e:e7:75:49:
09:ba:b4:aa:c5:10:b7:ed:2f:27:99:34:65:7e:d4:28:b1:26:
7c:b6:6b:7a:6e:c9:2d:69:bd:9a:7c:91:8d:08:dd:e7:3b:c8:
ff:a1:43:a2:ff:fa:b4:1f:fa:44:8d:d7:22:45:c5:42:28:3e:
b0:09:b7:3c:b6:4f:ec:64:c9:67:ac:96:84:d7:a3:0f:fd:30:
d1:01:1a:a1:dc:8f:28:7a:a1:24:b8:cb:89:ed:bf:85:a2:96:
9e:ee:75:58:e0:7e:41:bc:1a:62:e8:9b:7c:7b:c0:96:7d:b8:
82:47:11:b4:4f:0f:9d:4a:7f:f1:a0:20:91:6a:e3:a9:dd:92:
05:35:ff:75:f3:53:19:4e:c3:a7:56:0e:95:ce:f3:a6:6a:e0:
3c:fa:1f:5e:21:86:c4:d7:20:c7:ca:ed:ac:2d:1e:a2:2d:09:
47:24:e8:cb:8b:18:05:e8:fa:19:57:95:44:ee:5c:e7:47:69:
ea:3b:4c:5c:4c:5f:46:9a:ee:6d:9a:ab:e2:be:a2:ba:dc:0b:
c8:f1:38:e5:7b:45:7f:35:3f:de:2f:c5:9c:20:05:4a:04:51:
3c:f9:66:cd:9f:fd:09:3d:06:92:dd:f4:87:00:93:23:47:7b:
d4:3e:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:26 2025 by rpki-client on console.sobornost.net