Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa
File: 03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa (raw, json)
Hash identifier: Ldi1aqEVPXWUDTrgrfj0V1t6uXYpEZYs1pvzKea+TTk=
Subject key identifier: 8C:B2:1E:F3:35:C9:A8:6A:75:47:6F:F7:E1:41:D1:48:09:98:E9:45
Certificate issuer: /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
Certificate serial: 010D0C9F432858491ED6DCE2CB13A6F1D277CE80
Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16970
IP address blocks: 23.169.240.0/24 maxlen: 24
23.169.241.0/24 maxlen: 24
23.169.242.0/24 maxlen: 24
23.169.243.0/24 maxlen: 24
23.169.244.0/24 maxlen: 24
23.169.245.0/24 maxlen: 24
64.40.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:dc:e2:cb:13:a6:f1:d2:77:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=899fdd87-9708-4e6c-8577-f83f75189ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:7e:0a:a4:9d:0e:69:bf:cf:56:02:fc:2f:
c7:e0:1e:67:5b:b5:7c:2a:5f:6c:56:08:b8:a5:2b:
fe:b6:6b:73:83:4b:f6:ac:12:d2:65:08:a0:fd:6c:
b8:95:30:ca:77:c3:ed:6b:38:38:d0:a8:5e:d0:f2:
32:5a:3e:82:fd:97:a0:46:5c:17:b0:c8:73:8e:55:
f5:35:99:ff:a7:60:ef:b1:a3:8e:06:65:90:69:ae:
75:e3:05:9a:42:fc:bc:96:f2:f0:c8:5f:8c:e3:58:
c3:35:3b:55:a1:0f:c9:39:10:20:70:0e:26:01:42:
8e:7a:0a:bf:26:bb:61:db:97:7f:af:29:af:cc:c1:
66:f4:19:74:05:a9:b9:8b:b1:09:4c:c0:ea:25:c2:
3f:4c:bc:ba:5a:8e:a6:82:43:7f:3c:fa:c7:33:a7:
4d:a3:e6:81:e1:18:c8:18:3d:5e:73:50:d1:2c:72:
ac:77:61:30:ef:c2:72:e8:b8:95:aa:b1:cc:c7:0a:
99:34:9c:1f:53:a8:5b:a2:ed:ce:7f:24:41:99:5f:
6c:4e:80:3f:03:1b:35:ed:a1:25:56:23:e4:c7:8f:
c2:6f:96:8c:95:7b:74:9a:0b:85:dd:cc:57:8c:b0:
c2:8c:07:e3:58:f4:8f:66:5a:20:9e:4e:73:6e:43:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:1E:F3:35:C9:A8:6A:75:47:6F:F7:E1:41:D1:48:09:98:E9:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/03816a28-1e7d-35af-8fc8-2e3aec9a32ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl
X509v3 Authority Key Identifier:
keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.169.240.0-23.169.245.255
64.40.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:b3:7a:45:5e:b9:b8:8f:fc:9c:71:1f:d4:b8:02:56:39:ee:
6c:05:62:a0:4c:b4:8b:76:79:31:c2:b6:66:b5:e8:67:27:e9:
c0:5f:33:66:e8:37:dc:d3:22:0b:a0:8b:c9:ca:8b:16:27:6a:
a5:19:ce:d3:d6:98:76:cb:11:1c:fd:6a:2d:11:b3:b9:56:9f:
1a:43:d0:d4:4e:5a:61:01:74:0e:f5:ee:61:54:f4:df:c8:02:
d7:0a:10:8e:3f:b1:ca:08:2e:27:03:3c:35:67:fc:b1:32:18:
03:c4:62:4e:9d:f3:89:18:14:b1:96:0a:4e:7e:3f:ef:47:39:
67:4b:8b:0a:93:a4:22:14:e0:7a:8e:07:df:ef:38:88:fa:4d:
43:e6:04:ff:9f:c8:a4:60:6d:c5:8f:80:c3:d2:88:c4:fa:b0:
19:c6:0e:c3:16:cb:31:8c:a0:39:14:81:0b:0d:df:c6:eb:62:
38:66:8f:de:fc:d4:ab:4e:4b:47:c5:0f:0d:67:c2:9a:4c:b3:
af:93:c2:65:73:1b:52:8a:cb:aa:0c:6b:26:ac:1a:c1:19:8e:
28:15:21:b6:06:4f:d3:97:52:ec:40:3b:bb:dd:ac:09:f3:bb:
e1:81:57:c7:2f:e0:93:3d:70:6e:c0:9a:d9:a0:60:15:c7:b0:
86:2a:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:18 2025 by rpki-client on console.sobornost.net