Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa
File: 00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa (raw, json)
Hash identifier: tWSQxhadU7VPthQCqyaeosd36P5nGIgPI7tuARGBOvI=
Subject key identifier: A1:9B:77:13:86:2D:3F:44:13:11:23:3C:AF:77:0C:77:19:12:D4:E8
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F432858496484469D158E6BAB21852D40
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 7018
IP address blocks: 149.143.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:46:9d:15:8e:6b:ab:21:85:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=7b508bc0-2759-4c68-9ba0-af3c158b645f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:f1:c5:43:f0:a1:8f:3b:ce:35:b4:1b:bc:
fe:1d:ff:a2:8b:21:66:2d:c6:94:35:7d:bf:08:8e:
80:90:b6:b7:41:b1:f4:15:2d:4f:1a:85:53:b9:57:
74:78:a0:74:b6:37:49:40:75:24:0a:30:c5:45:17:
73:44:f4:b4:65:76:ce:0c:06:30:85:87:08:df:f5:
43:da:f8:a4:b1:4f:98:eb:4c:ec:d1:23:55:25:72:
e5:ed:bb:27:2e:ed:82:1d:3f:f7:02:6f:6d:aa:44:
89:0b:cb:8e:01:e8:3c:74:07:f1:21:3d:44:b8:19:
2d:0e:cd:cb:fa:98:af:43:b0:b8:21:81:87:ed:fc:
7d:ac:b3:0d:41:73:cf:9d:ff:70:4d:f6:97:e7:29:
9d:bb:2a:a2:57:e1:4e:b3:5e:98:7b:6d:0b:2f:26:
3d:80:d2:6e:72:29:09:e4:1a:e7:1f:83:b7:db:aa:
7d:4c:bd:76:3f:7a:4b:25:09:3b:bf:fa:81:78:2c:
f8:97:2a:81:bc:1d:aa:1e:79:b0:33:b1:47:0b:f2:
f8:52:6a:0e:ad:b3:25:39:f1:1a:8c:75:c6:43:8f:
38:ea:97:55:b9:59:d0:01:19:5c:8e:e8:fd:d7:25:
4d:f4:d0:7c:27:56:d6:3f:1a:5b:37:30:ba:f2:5f:
64:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9B:77:13:86:2D:3F:44:13:11:23:3C:AF:77:0C:77:19:12:D4:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:78:a5:8c:bd:36:29:07:60:8c:4d:10:f3:4e:75:16:bb:1b:
35:7f:09:94:6f:12:08:10:68:52:ac:e6:d8:8d:09:98:07:eb:
9b:36:9b:26:16:6b:32:16:92:67:8d:5d:a4:11:fc:ed:0d:e4:
44:92:86:05:9a:ed:39:33:7c:e6:41:4c:23:26:88:45:0f:07:
ce:4d:2a:ac:3b:95:8f:20:de:f1:52:98:4c:55:96:c4:0f:d1:
96:31:b9:c5:b8:08:86:06:8e:be:65:20:d0:94:6e:00:a3:23:
a9:19:d7:b0:d6:90:84:4c:4a:89:db:c1:46:49:32:b1:a8:79:
b8:55:7a:93:b8:be:2d:29:d8:d5:42:db:36:f9:07:3b:46:85:
bb:df:5a:3c:32:b4:1f:76:86:18:31:52:12:a1:97:d4:90:4a:
4d:b0:fa:ed:80:b0:50:f7:ed:3f:56:cd:45:16:4c:5f:f9:09:
43:f0:fd:64:02:d1:14:d3:95:f3:d5:76:46:29:11:7f:5f:60:
63:1d:8e:12:4d:bf:78:87:5e:9e:af:1b:8e:58:50:48:52:1f:
dc:04:7e:4c:b6:c9:49:32:e2:18:58:d4:fa:64:e0:b5:85:d0:
92:b2:57:9f:bb:1a:09:00:e7:79:84:23:cf:06:f3:39:f4:d7:
60:08:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:24 2025 by rpki-client on console.sobornost.net