Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b209cf37-eb89-38f8-850e-b396979a7668.roa
File: b209cf37-eb89-38f8-850e-b396979a7668.roa (raw, json)
Hash identifier: QTOc8t8Mr7GQBaUDNJvMQld/9IrCfgJEcWuGnxz6zng=
Subject key identifier: FC:B2:EE:2D:F6:33:CA:A8:04:63:CD:44:52:21:83:B0:5F:A9:41:FA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584964846EA2408BF1650ECE3300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b209cf37-eb89-38f8-850e-b396979a7668.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 16625
IP address blocks: 23.53.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:6e:a2:40:8b:f1:65:0e:ce:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=850efe3b-9650-449f-a0c0-6c416953cc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:4d:d7:08:19:4c:3f:e3:b6:7f:28:e8:f7:
a7:94:8e:39:f7:f8:87:82:61:2f:76:da:82:da:2f:
db:8e:89:da:a4:48:b2:ef:77:b1:98:94:31:5f:7a:
2f:7c:ed:2c:4f:67:48:39:ae:40:1b:5f:8e:94:29:
64:07:aa:1a:66:1e:21:27:1a:c8:11:6a:e8:ac:ed:
f1:c3:b3:a0:c9:52:89:37:f0:9c:dd:a4:50:67:24:
3a:1d:cf:1e:c2:55:90:f7:8f:15:f6:a3:50:fe:92:
87:d5:44:1e:a6:20:77:73:4c:ab:2d:3c:4d:7f:e7:
de:07:27:2e:df:4f:4d:ab:5d:b1:de:1e:ab:90:a3:
83:af:52:ac:22:ec:0c:12:b8:6d:62:7a:1e:aa:60:
1c:bc:22:ec:58:15:d7:f9:c6:c1:6e:39:8c:ea:d8:
60:00:64:c1:93:8b:cf:8f:ac:e6:cd:49:f4:c3:41:
28:94:fb:b9:1a:bd:da:e1:48:d8:38:29:90:14:ff:
f7:80:1e:be:59:81:8f:80:f4:e6:86:b0:1b:da:4a:
07:49:88:e9:f9:1a:18:ee:74:5b:f1:b2:37:2e:ff:
eb:5f:82:a9:16:f8:89:0c:a2:c3:5f:0a:db:64:ca:
99:0a:04:8b:40:0a:94:64:8d:63:95:73:23:d8:80:
0f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B2:EE:2D:F6:33:CA:A8:04:63:CD:44:52:21:83:B0:5F:A9:41:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b209cf37-eb89-38f8-850e-b396979a7668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.53.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:40:e4:22:40:64:a0:48:7b:2a:85:5f:11:03:f6:91:80:01:
73:96:b1:0d:57:7a:ab:f0:5d:35:37:e1:e2:55:65:24:de:f9:
c5:6c:eb:bb:b4:d8:69:d3:d7:d8:4d:c5:27:15:c8:75:f6:46:
7d:9c:9d:e9:cd:f9:a0:83:4f:43:9a:23:59:b5:f3:ff:37:51:
7f:34:0f:00:89:bb:36:eb:b2:d2:ed:6c:73:02:6e:f8:55:3d:
4a:8f:cf:89:15:3e:0f:95:c1:06:e6:47:74:be:12:be:90:9d:
0b:e7:89:50:cd:4c:57:b0:ab:e1:18:30:26:f8:56:e8:4c:b3:
10:74:a8:fd:c5:50:0e:5e:45:ac:a2:ad:22:a7:fd:0b:16:ae:
82:0b:09:53:08:bb:5f:0e:9f:f1:44:72:f4:10:d7:55:b8:b2:
32:43:b5:9c:80:c6:9e:93:8b:d5:22:97:4e:e0:81:c2:1f:8f:
42:d9:ad:ea:ba:4f:69:98:20:2a:01:7d:6e:43:4f:ef:5a:5d:
09:ed:24:4e:0d:0d:e6:5b:c1:0b:ff:70:db:57:ba:4a:13:a5:
99:0c:26:8d:45:16:13:83:f3:74:80:9b:c6:aa:f7:20:a8:be:
ed:af:1d:74:8f:19:ae:3f:b2:40:78:b9:8f:90:7d:c1:b7:18:
63:85:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:34 2025 by rpki-client on console.sobornost.net