Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9b6882bb-021b-31e0-901d-38923d67e9f6.roa
File: 9b6882bb-021b-31e0-901d-38923d67e9f6.roa (raw, json)
Hash identifier: nskv0NzcxBDTYNRR2nNYXYkM/ViBOAdXmhEKM6TtG5E=
Subject key identifier: A3:C2:BA:14:C9:DA:F4:53:BB:00:35:FC:88:97:58:03:0B:15:FA:D0
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285848F4F6A3BE84D405664E2E6600
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9b6882bb-021b-31e0-901d-38923d67e9f6.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 6629
IP address blocks: 140.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a3:be:84:d4:05:66:4e:2e:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=a80dc424-5bc2-45a3-a9ce-f49c77da1ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:7c:db:e5:9c:59:af:31:77:0b:b4:26:b4:
1f:5a:93:c4:82:03:8a:ba:8f:af:d1:f6:a1:1e:d2:
0e:48:0a:fc:4c:52:02:02:a1:b3:ce:b4:81:1a:0c:
60:2c:f8:74:e8:1f:59:2b:73:53:36:a5:fc:0f:8c:
39:b8:2c:82:1e:e5:bb:24:7d:6a:f4:95:0d:53:8a:
ae:4c:c1:09:81:b6:45:9a:05:7c:ba:55:58:41:ce:
5f:15:35:11:fd:6e:62:db:ac:14:59:d7:29:12:c5:
05:f8:5a:e1:6d:a2:72:9d:b5:d8:fb:96:8f:47:fd:
29:2b:fd:ee:84:d2:61:78:4c:5b:ea:89:56:c8:ca:
04:91:f1:89:fd:84:af:17:22:78:26:90:83:ac:38:
61:4b:fa:33:30:6b:fe:88:e4:34:f5:64:a0:eb:2f:
56:60:b3:7e:5b:7f:3e:28:9f:5f:16:60:08:a9:07:
f7:b0:54:30:60:a1:5f:eb:07:35:06:01:29:df:8d:
39:75:7a:a7:61:96:af:64:1a:e2:2a:4d:09:4d:32:
b3:79:9a:ac:ae:79:8f:df:f0:eb:b0:f2:10:50:52:
61:cf:c1:3f:f9:98:a7:94:8e:e8:ea:ec:50:27:2a:
da:a8:7a:25:d6:af:be:dc:de:70:af:e7:97:b5:07:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C2:BA:14:C9:DA:F4:53:BB:00:35:FC:88:97:58:03:0B:15:FA:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9b6882bb-021b-31e0-901d-38923d67e9f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
140.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:fc:af:58:23:41:40:82:8d:61:03:3e:3a:5d:a1:76:71:13:
d2:bf:2a:f8:4f:0f:d7:c2:61:9e:a3:f9:b6:da:1f:a3:ac:f3:
79:96:bd:e6:02:7d:28:4f:d7:77:0f:17:8a:ed:16:6d:87:1e:
f7:17:8c:94:eb:f2:8e:a6:c1:c7:30:72:9d:f8:34:8c:06:a5:
1d:ed:e6:49:5d:6a:65:8b:29:74:8d:dc:10:dd:5e:7a:27:ee:
ae:31:d0:a5:c2:80:b6:5c:80:7b:cc:c2:5b:03:0a:a6:c5:c2:
ec:be:c9:1a:e3:fc:61:76:ae:a9:a7:2b:af:19:5f:0d:f3:29:
c7:b1:09:1b:e8:59:df:5c:dc:f8:c8:e3:ac:65:c0:ee:0d:82:
30:4d:fa:f8:a6:9a:fa:61:23:aa:1a:ef:27:ea:ba:fe:9d:46:
fd:f0:fe:bf:b2:a3:08:33:60:ef:77:a3:fe:0c:66:5a:76:0a:
d1:57:70:51:0d:f1:d9:fc:14:47:a7:10:f7:17:a0:9c:1d:91:
81:e7:f2:e9:8b:c0:41:23:9d:48:dd:23:e8:e4:75:21:5e:3b:
b8:f4:d6:ed:11:2e:7e:d7:17:0e:c2:4a:58:c9:d3:c7:94:39:
7a:16:06:cb:f6:15:2b:1f:30:65:8d:40:88:7b:42:d0:df:4b:
78:c7:1a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:06:59 2025 by rpki-client