Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8394f08e-3416-326e-ab35-e7b55f42ec58.roa
File: 8394f08e-3416-326e-ab35-e7b55f42ec58.roa (raw, json)
Hash identifier: RZE2hBrsuEHch3Xlzkz2YZ21bXx7/gRhfcoKc0b/YVU=
Subject key identifier: D9:ED:7E:54:B5:AE:94:C6:6E:C3:29:00:E9:F5:B7:34:53:B0:49:33
Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial: 010D0C9F432858496FAF0C1EB9208FD16DF86100
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8394f08e-3416-326e-ab35-e7b55f42ec58.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 397666
IP address blocks: 23.157.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:0c:1e:b9:20:8f:d1:6d:f8:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=aeac46ef-7045-43f6-83d8-3c4cecde27ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:44:b2:4b:59:50:5c:2c:a2:dc:80:b6:0c:47:
60:3f:77:70:56:b4:2e:53:55:52:13:be:ae:ab:5f:
11:c3:55:c4:de:5d:22:c1:b8:c9:da:65:e1:c5:1f:
7a:60:ce:02:f6:46:b7:dc:d8:8e:69:51:9b:4a:cb:
3d:6e:51:7e:f6:11:15:8e:26:66:59:db:4d:93:c4:
c8:f2:42:ba:68:86:ee:a9:f8:86:b9:f9:23:ac:d6:
4d:cf:dd:e8:3b:4c:5b:25:05:ac:41:0b:06:07:e7:
20:f7:c8:ec:bb:5a:a6:ac:3f:db:f8:67:e0:3a:8f:
ea:d3:9a:bc:12:28:71:a2:08:f5:2d:f0:26:69:9b:
76:e7:82:49:d1:f1:6b:ca:8e:dd:eb:30:42:78:ec:
6c:c8:4d:a6:e1:27:68:f4:85:18:ff:f4:3f:cc:8a:
9b:88:4d:a9:1c:77:1b:71:b0:8d:6c:36:46:fd:1e:
b9:a9:f9:3f:2e:cc:76:04:96:d4:3b:a2:25:83:72:
43:8f:d0:aa:05:7c:40:36:de:98:0f:88:56:eb:ec:
79:98:6d:a7:58:13:49:38:51:c0:f4:d6:b6:af:c3:
eb:14:38:67:b2:81:56:f6:6a:79:da:c5:52:f5:bf:
1a:cd:89:7c:46:60:21:6b:bb:7f:b4:d7:3b:c4:04:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:ED:7E:54:B5:AE:94:C6:6E:C3:29:00:E9:F5:B7:34:53:B0:49:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8394f08e-3416-326e-ab35-e7b55f42ec58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
X509v3 Authority Key Identifier:
keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:9d:22:ed:bc:a1:9b:e6:e7:7d:23:5d:77:5c:f4:05:aa:59:
6c:8d:fe:36:84:4b:9d:7f:7b:64:5b:be:17:46:fb:d2:ab:43:
38:3a:91:b6:3d:7e:8d:1a:ff:39:7d:ea:7c:27:e3:91:aa:15:
4a:50:46:48:21:59:2e:0f:9a:52:c7:de:e0:0c:88:cc:77:eb:
da:8a:22:11:e1:1d:7e:fa:a8:36:15:a9:6d:66:27:d6:5f:90:
32:d3:ef:3c:84:28:5d:c1:44:10:09:58:27:24:9d:11:05:d6:
63:70:e2:ed:c4:56:77:74:a0:4f:8c:4d:84:f0:74:34:13:0f:
c7:4d:8c:07:ee:f3:60:e2:26:f4:d0:b6:a7:34:8f:cf:a1:da:
14:03:e1:4b:08:ab:9b:5b:f8:c3:02:e7:7c:bb:a7:b1:5e:82:
ee:74:a9:5e:e0:f7:22:d0:67:b5:27:8a:8e:e0:23:be:e2:b7:
fb:fa:c8:e5:08:f6:bc:1d:b0:33:f4:7e:5f:31:b9:e7:5e:ba:
59:81:f5:0c:73:57:1e:b0:40:0a:66:d9:bb:8d:1f:1f:9f:ad:
0b:a0:72:a2:0b:41:2b:94:73:be:fc:32:55:c4:7a:91:eb:22:
30:13:52:db:1e:cf:6b:9e:d7:4d:b4:5d:91:b4:78:0c:f4:25:
09:6f:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:32 2025 by rpki-client on console.sobornost.net