Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2948f9d-c8d0-3302-9116-d0f31e13595b.roa
File: c2948f9d-c8d0-3302-9116-d0f31e13595b.roa (raw, json)
Hash identifier: k3OdkdE2lYU/PbMsO5+fqgwJyfszmqbMY+8eoK6s5rY=
Subject key identifier: 48:34:25:9A:01:AF:4A:66:10:CB:36:77:E8:21:F2:4C:10:A4:A4:A5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849833A0F7F141CAAC31ACC72C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2948f9d-c8d0-3302-9116-d0f31e13595b.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 16625
IP address blocks: 23.196.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:3a:0f:7f:14:1c:aa:c3:1a:cc:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=e5435620-0f10-4a03-a4c1-143c2fba86e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:1d:3a:01:9a:16:1b:e8:e7:e8:15:6e:93:
18:35:ad:fb:f8:45:57:57:ba:a7:d9:8d:a8:b8:ca:
4b:c4:09:cd:d6:42:d0:17:06:30:fd:cc:7c:48:9b:
dd:c1:5c:32:e8:fd:a7:dc:83:94:a7:fb:bd:96:e3:
e3:a4:69:cc:f8:94:49:c0:68:93:5e:e0:f4:d1:46:
d0:13:d1:82:d8:04:90:b4:64:90:af:b1:55:33:4f:
35:27:b8:52:38:b3:f5:11:f3:3d:75:48:5e:07:73:
5e:02:47:21:60:d9:99:09:a3:60:02:b1:42:f5:30:
06:f7:7e:66:f1:92:0c:49:78:ee:c4:c5:ab:fd:c0:
1c:e4:29:10:3e:58:92:27:71:16:9b:fe:0a:f2:21:
97:00:ac:0c:98:0f:90:51:18:05:8c:79:15:ca:53:
de:bb:05:00:eb:32:e9:d8:82:c5:0d:89:6f:75:9f:
23:2e:57:51:cd:21:cb:63:52:5d:e9:bf:4d:57:e8:
0f:23:b4:86:50:7a:f4:fb:65:9c:67:dd:76:0d:08:
66:4f:1f:f5:36:17:71:7d:8b:67:87:cb:0e:a7:3b:
16:91:ac:3f:03:f2:9e:51:b6:e5:3c:99:2c:07:ea:
0e:46:e3:db:0d:33:93:bf:33:5a:16:a1:39:fd:5d:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:34:25:9A:01:AF:4A:66:10:CB:36:77:E8:21:F2:4C:10:A4:A4:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2948f9d-c8d0-3302-9116-d0f31e13595b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.196.212.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a9:34:81:b5:f2:f1:80:72:97:d4:cf:0b:ca:6d:af:e5:cb:
62:b7:7c:38:48:6d:3c:b9:f6:3c:69:90:20:db:6a:da:8f:b7:
16:e5:7c:72:4a:df:40:74:49:b4:14:03:72:dd:5c:5d:e2:7b:
59:1d:6d:33:0f:3b:36:ae:32:01:a4:ce:dc:c0:6f:db:a1:7c:
c1:9d:1d:a9:c6:5c:af:bd:2c:c9:23:6c:09:86:5c:1f:91:3e:
21:4e:6f:1a:fe:dc:c6:58:31:1a:13:24:84:48:90:37:eb:1b:
27:63:02:6a:8f:c7:de:65:96:fc:0a:d1:56:e4:25:8a:ce:97:
8b:8b:f8:be:ad:d4:2e:bf:64:58:24:a0:f4:b4:91:28:16:c9:
d0:15:47:fb:bc:ac:ca:c2:80:c5:f6:c0:98:a6:8a:5d:93:9e:
b9:c3:7e:f1:03:bd:32:38:39:4a:f7:0e:b3:db:00:ca:4d:20:
28:a6:20:b2:f3:b3:31:b0:45:c2:22:b6:54:fc:42:54:91:97:
9a:df:ea:22:97:ab:a6:80:8e:b5:4f:94:de:28:82:7d:cb:52:
4b:c9:e7:42:7d:f1:fd:85:52:6a:61:19:5a:22:81:fe:07:be:
19:d2:c0:52:71:c8:62:87:48:a2:53:ea:d1:61:f7:65:7a:84:
85:12:27:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:37 2025 by rpki-client on console.sobornost.net