Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d30dd7e9-e7d6-36b6-8536-7f3b83092f36.roa
File: d30dd7e9-e7d6-36b6-8536-7f3b83092f36.roa (raw, json)
Hash identifier: 8zpSv2SgVRhIP0B/18rrKjw37CB3zjcBrJmWbzMvFJ0=
Subject key identifier: 58:9A:8D:4E:A1:18:9A:69:25:0B:71:42:91:4F:84:89:AC:96:59:E2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858496CE4762428DBA0855588CDC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d30dd7e9-e7d6-36b6-8536-7f3b83092f36.roa
Signing time: Sat 05 Apr 2025 13:01:01 +0000
ROA not before: Sat 05 Apr 2025 13:01:01 +0000
ROA not after: Fri 04 Jul 2025 13:01:01 +0000
asID: 20940
IP address blocks: 23.58.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6c:e4:76:24:28:db:a0:85:55:88:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 5 13:01:01 2025 GMT
Not After : Jul 4 13:01:01 2025 GMT
Subject: CN=8ed2e29f-eb41-4cbf-b764-c7982b61070d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:a0:bc:30:74:94:0e:36:9b:17:02:56:a6:
d7:cd:3c:a5:02:47:47:2b:ea:43:f6:a5:a2:68:02:
47:1c:46:1a:3d:da:13:b0:ac:d4:fe:e4:c3:12:36:
14:89:a0:b6:cd:b6:49:5d:c5:ed:a7:62:b4:1e:fc:
43:a8:23:3a:e9:c6:d0:67:ca:f2:ec:47:5d:4e:e1:
22:10:36:f0:01:4f:8c:f4:52:48:8a:a0:d4:e4:91:
2a:5f:ae:15:72:42:d0:7f:f7:0c:c6:7a:ad:63:f7:
da:a8:b5:0d:50:e1:32:e2:6e:06:16:bf:92:f2:1d:
86:28:aa:2f:39:d2:8c:73:a0:c5:2f:47:77:6b:04:
1d:f1:d3:0f:e5:13:90:80:82:51:c0:6f:e6:1f:a4:
45:30:ad:a5:7b:f7:00:e2:a7:67:f6:dc:97:99:58:
31:cf:4b:8d:ed:4c:a7:9d:94:03:73:ac:8a:4c:da:
e8:09:18:87:0c:6c:4e:f7:7e:9f:90:fe:b9:18:ee:
e7:65:6b:34:a9:ca:3b:49:ad:c2:42:d1:be:67:13:
fd:f5:88:32:72:d4:87:82:2f:6e:97:83:36:08:a7:
91:1b:1b:27:d2:64:a9:6f:e4:b1:a2:cb:38:12:68:
f7:ba:e2:96:ac:5f:07:82:d8:26:3e:db:0d:67:7a:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9A:8D:4E:A1:18:9A:69:25:0B:71:42:91:4F:84:89:AC:96:59:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d30dd7e9-e7d6-36b6-8536-7f3b83092f36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.58.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:8b:06:11:33:f1:f2:78:b0:e0:5c:7b:b5:bc:f9:1e:37:bf:
b8:7a:37:d3:1e:3c:be:2d:61:31:8a:6c:6d:5f:ca:7d:82:75:
a9:97:a3:bf:03:bb:6e:f1:d7:e9:55:ad:a9:98:44:7e:34:d0:
33:aa:73:57:81:fd:c9:4d:17:94:09:ad:8c:c2:17:cd:e1:fc:
64:8f:1c:fd:11:3f:52:c0:a4:39:c2:b4:d6:42:51:15:97:54:
32:8a:72:ed:bf:ad:e7:18:23:ef:53:7c:17:8f:7c:bc:09:ca:
e9:c8:db:c0:f1:77:d4:b4:bc:ce:c1:85:c6:e1:33:45:e2:f0:
39:9d:e0:8c:8b:fd:a6:db:6e:6a:bf:1b:f7:df:fb:75:ea:1b:
3f:c5:f5:1d:f7:06:f3:52:d4:0a:b2:09:2f:ee:26:85:e5:81:
4e:0f:9c:90:50:e5:cb:0e:f5:3d:5a:72:7c:b2:55:1a:61:5e:
38:b4:07:f1:e0:3d:df:e5:87:14:34:02:3e:f7:60:72:7d:fc:
63:a5:36:1c:e3:e7:eb:0b:a6:75:32:19:28:6e:71:95:a2:8d:
23:60:08:0f:72:b5:ff:be:e2:39:e7:14:bd:4e:4c:ba:ac:e2:
ca:92:b1:c8:82:11:62:ec:a1:70:e5:c3:09:d0:68:e8:67:e1:
dc:c7:4c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:50 2025 by rpki-client on console.sobornost.net