Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa
File: 35c067f0-3efd-3363-93e0-a8537ed06e64.roa (raw, json)
Hash identifier: h2Cmk0t3zt7KAI0xnlVqY2dz9Wkp+3Pg4R6wY88PxWY=
Subject key identifier: B1:0F:61:91:C5:99:FD:6E:68:30:A3:B9:71:B6:2C:94:C0:C3:73:28
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858487FB5D3501C50FC714F0A6A80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 989
IP address blocks: 8.18.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:d3:50:1c:50:fc:71:4f:0a:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=7c83fa8d-b045-4808-8ff7-cf83c761adb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:44:8b:0d:2e:c4:db:9d:ed:e8:20:49:55:
bf:b7:d9:37:73:4c:cd:7f:6d:93:a7:69:f9:43:48:
5c:1f:43:7a:24:65:5d:32:c9:5b:20:6d:7d:62:68:
ff:37:d4:74:4f:54:77:32:20:5f:fe:57:63:3a:c7:
38:b9:14:5b:8a:83:8c:61:e6:a9:2d:f9:17:74:81:
d8:67:d6:07:c9:6b:35:04:d2:30:23:f6:c7:0b:0c:
b9:14:6e:fd:f4:dd:a2:56:db:1c:f4:b7:cb:e2:03:
64:3c:de:0e:9c:ee:aa:49:fa:6d:65:ba:fd:ca:d3:
7f:81:58:8a:ae:c3:34:66:44:ae:fb:e0:d7:38:41:
41:ce:d2:72:1f:43:fb:4a:da:60:4c:9c:c8:40:39:
82:15:63:34:0e:62:6d:13:47:cb:86:52:35:9f:67:
98:b6:eb:9f:05:4c:53:00:2b:3b:32:35:b3:77:ba:
82:07:fd:46:fd:00:08:40:84:98:63:3a:cd:dd:d4:
65:28:4d:c5:03:f7:2d:f7:01:2d:6b:0c:84:ee:ff:
a6:1f:7f:d9:c7:af:61:cb:c2:47:da:10:f5:61:9d:
a5:7e:0d:53:7c:30:01:62:47:b8:b7:ca:53:d6:22:
17:0a:7d:17:37:af:c5:fe:ab:08:61:ea:47:95:e8:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0F:61:91:C5:99:FD:6E:68:30:A3:B9:71:B6:2C:94:C0:C3:73:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.18.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:74:9f:fc:63:c0:1a:06:91:93:61:57:7e:30:ee:7e:73:58:
26:29:9b:3a:2b:de:c6:3a:1c:ab:9e:d1:7b:a7:d3:45:ef:98:
ce:9c:21:d7:62:99:ee:0f:3e:a8:75:b7:db:5e:31:07:7e:45:
36:3b:15:05:a9:e4:53:eb:f2:73:20:b0:e7:c3:25:79:b2:26:
2c:d4:a7:02:78:6c:14:57:60:57:26:f6:32:17:ad:d6:bd:22:
bf:0b:3e:37:c8:5f:a1:cb:d2:c4:34:f4:14:b2:22:de:c4:85:
71:9a:2f:04:3c:05:c7:f4:de:dd:2f:31:b0:78:d6:8b:4f:4f:
32:4a:e0:64:dd:87:09:29:4e:3f:3e:ca:de:c7:21:d6:6b:19:
ba:00:7d:a4:0c:1d:3a:bc:17:16:c6:04:fa:50:05:15:df:70:
59:40:ba:5a:56:22:98:b0:0b:56:58:3b:1d:29:86:b8:da:e1:
c8:3d:7a:aa:98:00:b1:e1:96:40:cb:2d:ec:9f:7a:d8:38:2f:
50:40:02:74:10:66:0a:4f:ec:59:63:72:01:6d:42:0c:20:83:
19:6e:fe:aa:40:0b:b4:a7:6b:70:bf:88:1d:bc:04:87:53:48:
c8:0b:30:7e:d5:16:9b:0f:fe:f3:c9:80:5f:51:39:f8:2e:89:
29:f3:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:59 2025 by rpki-client