Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47a696d8-8aac-3fdd-bb6e-4da5be746267.roa
File: 47a696d8-8aac-3fdd-bb6e-4da5be746267.roa (raw, json)
Hash identifier: axJRDXO5jKS63V4Is8p7DT/xXIdPxfmFNY4+jOIc7Jw=
Subject key identifier: 1C:76:36:CD:E3:6D:6D:22:79:5F:49:08:66:2E:E0:1C:60:A3:5E:9A
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858493ED3C9B5A5F97EB0820AFFA0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47a696d8-8aac-3fdd-bb6e-4da5be746267.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 11178
IP address blocks: 8.20.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:c9:b5:a5:f9:7e:b0:82:0a:ff:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=96ad2aad-f27c-4c9e-b351-65ced126871b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:fe:a1:7a:c8:3d:cf:67:94:a3:36:36:1b:
5e:d7:c8:13:cc:c9:ae:6e:e1:88:21:7e:ed:ef:21:
7a:d0:5a:24:bd:c9:39:ed:17:13:32:87:c0:f4:c4:
fb:e0:7f:3a:07:79:71:b8:6d:72:61:99:fb:bb:c9:
67:8e:b7:47:4b:1e:23:6f:00:ba:ba:9e:0c:47:be:
80:6e:e4:65:ed:84:15:83:1e:19:68:33:46:fb:57:
29:22:b6:a9:f7:a1:45:af:ab:6d:38:61:b4:ef:0f:
be:5e:ea:30:c4:e8:8e:d5:fc:9d:1b:35:66:d6:7a:
f6:c9:94:bb:cc:02:8a:ba:7f:1c:cb:3a:02:d9:6a:
37:01:8a:52:17:86:83:d8:00:f9:8c:cd:cf:6d:4e:
97:51:0b:75:dc:28:33:05:9b:77:42:47:04:29:61:
54:45:ea:0a:61:09:4d:c2:07:72:8e:ca:8f:d4:e7:
8c:38:ba:ae:ce:37:25:7c:38:27:94:4d:0e:db:75:
9e:3f:9b:ed:ef:f0:51:52:ef:cd:ca:be:4e:6b:7c:
ce:40:a8:e7:16:83:45:27:71:3d:1a:45:ce:0f:08:
cd:28:21:2f:85:06:6e:56:e4:85:f2:33:4f:3d:7d:
cc:db:c8:58:87:f0:36:80:2b:b8:88:ec:8b:c8:28:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:76:36:CD:E3:6D:6D:22:79:5F:49:08:66:2E:E0:1C:60:A3:5E:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47a696d8-8aac-3fdd-bb6e-4da5be746267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.20.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:bf:70:4f:b9:ee:cf:b4:a2:12:6e:8c:3c:3a:5f:9a:94:92:
2a:29:34:86:36:b2:53:4d:4c:43:4e:29:c0:8c:9a:4c:7f:77:
bb:25:00:66:e1:0b:3e:aa:c2:c7:0a:5f:b8:a1:7a:a9:7c:64:
58:85:c1:04:61:ab:ca:a5:76:5d:00:9f:4f:0e:0e:9c:9f:04:
14:94:01:47:9f:a0:d6:ac:be:05:c4:d3:77:cf:3f:13:1f:af:
b4:fd:80:cc:62:84:2e:8c:27:cf:12:79:dc:2b:c5:ca:06:84:
73:69:fc:d3:87:a3:e3:f3:31:01:f4:a9:f4:5d:1b:e0:2d:3a:
3c:21:9e:db:37:d7:59:aa:79:04:d1:e6:6c:c2:a1:90:89:8a:
9d:64:9f:57:d5:f4:59:54:9a:a5:62:c8:41:86:c0:9e:01:d2:
18:cd:7b:06:34:cc:ec:fe:05:fe:d6:86:17:ae:93:eb:42:27:
29:7c:9c:d2:bc:57:ab:1e:a0:32:c4:07:31:bd:0b:42:bb:f0:
e5:33:ef:b7:cc:73:13:25:0c:43:6d:95:dd:5d:47:eb:b8:d5:
de:61:14:91:9c:3e:4e:df:54:69:b5:b8:a4:23:35:84:2f:ef:
fc:5c:0b:78:f4:00:db:0d:07:31:17:1c:54:fa:4a:e3:6a:e8:
e1:d3:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:43 2025 by rpki-client on console.sobornost.net