Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa
File: 3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa (raw, json)
Hash identifier: c8lDtXr4sQ8YgSOhffFVg4dtv0IELPU/MfOOB8v1M6U=
Subject key identifier: BE:2F:00:55:84:91:9F:8B:FA:9F:1F:C4:87:FC:91:89:4B:2A:21:B1
Certificate issuer: /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial: 010D0C9F43285849780F00E98BA0FF607B842B00
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 27580
IP address blocks: 104.153.152.0/24 maxlen: 24
104.153.153.0/24 maxlen: 24
104.153.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:00:e9:8b:a0:ff:60:7b:84:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=9f17daa0-2c8f-4daf-8316-87f810a207ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1d:0b:e7:17:a9:07:98:e7:9a:0e:6d:42:b2:
73:1d:ba:9a:4a:25:2b:30:5f:5c:8d:e5:45:98:b5:
5c:fe:c6:db:c8:63:5b:85:02:b3:ea:e5:68:78:7a:
42:aa:a4:65:c7:8a:db:f5:ec:7f:de:b0:91:57:78:
fd:e7:78:e6:5f:ec:b6:c7:0f:6f:a0:ec:41:f2:ad:
6f:45:de:2e:eb:a1:6d:f5:b2:c1:c8:27:f4:2d:25:
c8:16:53:1d:59:7b:83:d3:b7:ef:fb:08:3c:e7:e8:
ae:55:68:28:12:e9:cc:6d:dd:67:b2:c8:c6:aa:cd:
ae:2a:e1:c3:b5:a8:04:6f:fa:37:d9:22:52:09:39:
ac:98:6c:2e:d9:15:4c:25:8e:d6:b6:97:09:d8:47:
bf:e9:42:a5:2e:ef:02:0b:00:00:95:d6:a2:5e:54:
59:56:ed:a4:90:28:8b:b8:c6:e7:5e:ca:dd:1d:dd:
b5:cc:87:8c:c6:3b:a0:83:eb:eb:04:be:bc:d6:e4:
a2:df:26:27:da:77:d4:93:58:e7:ac:c7:83:27:4b:
55:f1:16:36:64:44:d4:04:5e:c7:73:19:43:d6:bd:
83:c7:4b:10:c6:91:5c:8e:e9:63:b3:14:56:a3:6f:
3d:c9:61:2b:0e:cf:12:b1:e7:6f:34:c8:89:82:24:
50:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2F:00:55:84:91:9F:8B:FA:9F:1F:C4:87:FC:91:89:4B:2A:21:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl
X509v3 Authority Key Identifier:
keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:0f:13:87:46:00:65:89:d9:b6:b0:41:6c:40:75:d0:5c:1f:
67:d1:f0:4e:87:8f:48:57:26:bc:18:53:c0:17:27:8c:2b:85:
1f:6d:00:b6:1f:5c:12:f2:3e:fc:1e:b8:8e:2f:eb:8b:ff:6f:
99:ee:9b:e5:d1:53:75:90:8c:e4:7c:46:f6:22:a4:86:ca:52:
c8:26:92:94:40:d9:1c:e1:4d:00:62:51:b2:07:eb:7a:80:99:
01:5a:96:28:1e:35:60:44:d5:c4:1a:f6:5a:fa:92:bb:63:d8:
2a:68:7e:20:fa:05:36:e6:73:ed:92:9a:a0:a1:48:0e:6e:83:
dc:34:36:5b:9a:81:e0:df:ad:47:d2:2f:53:b2:27:fd:83:dd:
9d:c9:53:63:10:e9:23:f0:dd:ae:89:b5:6c:89:b9:35:95:6b:
d1:fc:67:bb:5b:41:a6:97:01:1a:cf:3a:38:e8:d8:9f:29:68:
62:cb:42:de:e2:8e:bd:f1:42:05:be:c5:34:f2:57:b8:e2:8f:
9c:95:39:3a:6a:da:53:de:ce:bc:34:f6:27:b7:0b:b8:d6:26:
67:ed:ee:88:e9:bb:fa:85:f7:82:2d:c8:cd:76:2f:18:fd:a4:
26:8b:3e:41:78:02:1a:ec:30:ec:3c:c7:5a:23:10:7d:06:e2:
5c:57:3f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:45 2025 by rpki-client on console.sobornost.net