Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f7064ce-40c0-3847-932e-e3ec250bd534.roa
File: 9f7064ce-40c0-3847-932e-e3ec250bd534.roa (raw, json)
Hash identifier: cWMLL3bd2Xb8KaXVEy2rjTW9yWgW3oqBJb+BmaKDzvA=
Subject key identifier: FD:6A:51:8D:A8:16:BE:6B:09:03:02:D3:69:65:C7:00:65:40:96:C0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858497279BE3A97F666A90711B980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f7064ce-40c0-3847-932e-e3ec250bd534.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 20940
IP address blocks: 23.207.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:be:3a:97:f6:66:a9:07:11:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=170878cf-ecfe-43c6-b72d-42cf88faf111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:00:ae:9e:4b:4c:c3:25:90:2a:22:43:42:
1e:80:b1:18:3c:8b:4b:77:a0:22:64:44:a2:03:22:
b1:a3:5d:74:96:e0:9c:ba:92:16:f0:23:c2:04:ee:
7c:14:a9:d4:35:49:ab:87:97:c5:9f:b4:53:ce:81:
4e:a5:4f:02:dc:d4:78:6c:99:6c:63:94:c5:cc:9e:
78:2d:21:36:d0:8d:a3:4c:a6:93:ef:76:18:af:fb:
c1:91:9d:b7:08:3e:3a:46:2a:c7:86:09:2f:3f:60:
d0:34:e4:f3:bf:04:31:fb:39:b6:15:c4:c0:06:11:
74:c8:77:2a:c9:f4:73:8d:0f:52:33:14:ba:53:42:
34:10:0d:1a:8b:17:2a:50:48:5a:c3:88:43:5e:de:
ba:25:fc:5c:53:30:2a:9a:a4:59:26:80:52:90:77:
ab:d2:ab:06:20:9d:8a:0d:2f:11:f9:59:70:99:d5:
e1:f7:44:d5:39:69:4e:7c:37:c7:37:b6:40:fa:bd:
1e:4d:33:62:0f:4a:3b:c8:20:ec:7c:c9:30:50:e0:
32:1a:30:5d:93:07:ce:cf:80:47:01:c4:5d:6f:7a:
0a:73:ba:b7:11:4d:08:ed:3a:25:d0:4f:9f:a1:3d:
54:e4:bc:24:da:0a:24:c2:c8:73:e7:0f:e5:35:7a:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6A:51:8D:A8:16:BE:6B:09:03:02:D3:69:65:C7:00:65:40:96:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f7064ce-40c0-3847-932e-e3ec250bd534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.207.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:66:b1:fd:5b:fb:f4:4c:e7:48:c0:c7:de:3b:37:5f:fb:ad:
42:ee:e5:6a:bd:9b:a1:50:77:16:c9:34:8c:15:2f:4d:a4:c5:
d4:f9:c5:a4:53:80:cc:57:68:c0:55:78:71:54:9e:fc:41:35:
4a:ba:ca:fb:38:15:6d:9e:07:4a:e0:a3:92:56:68:f9:1e:1f:
17:4a:96:74:18:c3:91:c2:8a:0b:7e:c5:56:9e:4d:4a:35:52:
23:6c:2f:8f:42:02:41:92:d5:e1:1e:ab:56:d5:6a:3b:74:aa:
dd:25:c3:1a:dd:d9:69:38:36:b6:2d:f5:f0:9e:85:bf:12:0d:
30:fe:22:fc:e9:98:22:fe:da:f3:cb:4b:0e:66:52:6d:1d:2a:
d4:85:b3:39:a0:28:37:ec:16:1d:35:8d:bf:cf:70:dc:cf:69:
22:56:c5:d3:7b:08:1a:63:a4:1f:ca:8a:8e:a2:8f:60:55:dc:
74:66:df:50:e4:aa:35:f6:2b:23:82:1e:f5:03:97:db:e0:68:
52:d0:07:0a:7d:ef:53:67:8c:a1:b4:ba:39:a0:23:6e:43:b4:
74:db:49:37:65:47:ad:00:41:5b:d0:25:27:bd:4b:dc:64:bf:
97:96:d5:21:a6:52:03:bb:65:3e:14:fd:e1:5b:6f:6d:1e:f9:
29:85:24:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:30 2025 by rpki-client on console.sobornost.net