Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa
File: 35c067f0-3efd-3363-93e0-a8537ed06e64.roa (raw, json)
Hash identifier: Th7aI1cMN7Sqr1tvNaI/ocuz6qRmzU0AHl/VI9OUprk=
Subject key identifier: EB:80:DC:36:B3:DA:0A:58:7F:D5:5F:67:0C:F9:96:13:73:68:3A:B5
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858495EEED69B041CC6697EDCA780
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa
Signing time: Mon 31 Mar 2025 13:00:59 +0000
ROA not before: Mon 31 Mar 2025 13:00:59 +0000
ROA not after: Sun 29 Jun 2025 13:00:59 +0000
asID: 989
IP address blocks: 8.18.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:ee:d6:9b:04:1c:c6:69:7e:dc:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 31 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=706b618f-2320-41fe-95db-22bf7cd4e73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:8d:e1:5e:b6:1d:fc:43:3c:4a:16:81:f4:
2b:25:a8:06:ce:50:04:3e:94:3b:b3:19:cf:a9:83:
29:bb:cd:99:1d:11:48:82:f5:f7:e4:25:59:3a:ec:
20:c2:25:b4:13:82:e0:42:57:fa:cf:57:b0:9f:17:
33:c3:3e:2d:1e:c1:67:8b:96:5c:85:cd:9d:b7:ca:
87:ac:e9:a6:35:bd:7c:27:bf:db:6b:45:f5:f5:95:
10:9e:ab:e7:dc:e7:9a:1b:cf:06:48:09:71:33:7f:
82:4f:87:20:b0:36:c9:6c:69:c2:c7:fd:d7:5d:31:
b5:5e:1d:5e:50:e9:40:6f:04:89:04:79:56:2a:ad:
99:e5:21:2e:9d:ef:5c:47:98:2c:09:3f:a9:50:96:
87:65:ab:be:d0:d3:ed:2d:e4:57:21:3e:93:e6:e6:
17:5c:6f:a7:9b:21:0f:27:de:da:24:01:a0:99:59:
1f:af:6f:d2:0a:94:22:cb:31:8d:88:c5:1c:ab:7a:
a5:b3:fe:f2:8c:4c:5d:70:b4:cc:49:69:4b:cc:0e:
f1:89:d0:e1:90:56:48:b4:83:8a:a5:1e:6f:30:bd:
ba:1d:a9:b7:3d:72:be:33:5a:e2:35:61:8c:36:aa:
8f:fd:4b:49:19:8e:70:b0:86:bb:77:64:37:ad:36:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:80:DC:36:B3:DA:0A:58:7F:D5:5F:67:0C:F9:96:13:73:68:3A:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.18.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:dc:e6:76:e0:e0:43:e0:a1:06:17:0f:d9:35:1b:3d:f1:37:
08:28:6e:88:b6:42:4b:1f:68:9d:f5:25:5d:87:4f:61:c6:67:
8a:23:c6:0b:66:50:a8:7b:3c:a3:a6:4f:6c:7f:0e:69:96:63:
59:1f:fd:60:a8:1e:22:e3:24:e5:bf:d3:34:d3:80:e3:f4:d9:
d7:0c:7d:53:66:7f:bd:05:01:9e:0d:92:69:48:dd:42:f3:0c:
5a:5f:5e:df:d6:9f:b7:6f:d1:f6:89:1c:9b:9d:b1:04:bf:b7:
c7:f8:9f:6c:35:05:ba:b4:64:ba:e2:01:20:d5:8f:f5:06:71:
69:29:fd:ee:5e:f2:a8:67:5b:ca:2c:de:9b:23:ef:a5:30:3b:
9a:e8:71:ca:40:f4:7d:65:b2:70:cb:a0:87:77:7f:73:e2:cb:
9c:42:4c:af:5c:df:a4:dc:41:40:dd:b7:e2:d6:14:ce:fb:cf:
9b:9a:8c:5e:42:5b:2a:bf:0d:93:e0:3d:28:2a:66:53:cb:9f:
9d:9a:59:09:4f:18:4a:4f:ed:cf:5f:12:ff:12:77:85:95:c5:
86:b0:bd:3c:0f:08:64:31:47:9b:87:ac:79:0b:7f:e4:29:60:
73:56:2a:bb:01:b8:2e:d9:c9:eb:34:99:c1:9b:1b:fe:a8:2d:
35:cc:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:42 2025 by rpki-client on console.sobornost.net