Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e6d863c2-4fff-33de-9e33-517b9be1466b.roa
File: e6d863c2-4fff-33de-9e33-517b9be1466b.roa (raw, json)
Hash identifier: 9ROKVbiLyU48cowMZIqn8cAqKjq9pe123vf4qiN1GLA=
Subject key identifier: A6:F0:46:EF:8D:F6:09:8A:8E:5F:23:DD:53:26:A8:2A:3B:64:8E:F2
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285848F4F6A2C389F92E2671072480
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e6d863c2-4fff-33de-9e33-517b9be1466b.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 3477
IP address blocks: 140.172.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a2:c3:89:f9:2e:26:71:07:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=450cfac1-69e2-4b41-904e-e3f945265ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:66:d2:98:3c:dc:31:66:bd:3f:44:ab:4b:
01:90:e0:ed:9c:f4:17:02:29:4f:3c:8d:09:09:f7:
4b:ca:51:ec:be:7f:07:4d:f1:8d:bd:fd:c6:f3:66:
13:de:b5:27:94:3d:e2:52:35:7d:38:95:e2:da:d9:
ad:99:5c:ec:48:33:7c:86:1b:63:7d:70:e4:79:91:
77:65:4e:f6:7f:e7:97:54:4c:d3:60:13:c9:db:8a:
f9:3a:56:20:e0:c1:5a:86:58:20:f3:55:9b:0b:b5:
12:c1:44:ef:4c:99:a8:77:30:cb:ef:33:b5:96:5e:
d3:e5:63:5d:a4:7b:9f:d7:df:d2:cd:29:ae:2b:53:
89:a8:a9:b7:37:14:88:bc:ef:a0:69:42:3b:52:a6:
a8:cd:bf:20:c0:aa:b4:b1:22:1a:17:c3:00:b5:cc:
91:37:ac:dd:f0:5e:aa:70:b4:96:bd:7a:66:63:75:
01:26:29:f5:fd:92:11:78:2e:38:eb:ff:79:26:84:
1b:37:fb:95:29:75:98:bd:64:0f:a3:2b:87:cc:0d:
12:15:a1:9f:a6:16:88:8e:0d:79:68:40:c4:b8:38:
1e:fd:a5:65:22:58:d9:9d:f9:47:0f:ff:e2:20:43:
f4:ea:1c:0b:ed:0f:37:93:a6:7a:38:d7:fe:9c:e5:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F0:46:EF:8D:F6:09:8A:8E:5F:23:DD:53:26:A8:2A:3B:64:8E:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e6d863c2-4fff-33de-9e33-517b9be1466b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
140.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:66:5f:db:c6:5c:6c:c4:c1:3b:a9:d1:7f:62:47:22:5a:ad:
dd:7b:79:11:63:6b:2e:86:49:bf:b5:8f:a6:67:7f:ad:2a:eb:
d3:9f:25:02:a5:bf:99:ef:84:81:43:f6:89:81:b1:64:3e:15:
4e:2a:38:6b:92:31:d4:18:e6:27:36:73:dd:3d:10:aa:fc:b4:
8d:d1:84:10:44:a4:3f:b2:63:fe:d9:25:b6:d5:d6:3c:6c:9e:
4b:75:06:a0:b2:62:d2:eb:e5:3a:65:b1:35:df:c0:54:61:52:
5d:89:67:6e:f8:8f:77:6b:43:11:40:f6:11:81:ab:ff:4a:62:
d5:a5:79:7a:8c:3c:d8:d5:0e:a1:92:eb:b2:1d:83:27:fc:ab:
a2:76:a2:2a:4b:9d:38:79:47:36:2c:e5:13:c5:63:f3:c0:5f:
2b:bc:cd:8a:96:77:88:a8:fd:9b:ef:d5:9f:bd:17:48:3b:ba:
32:87:0b:7f:d8:7b:c8:51:1d:fd:53:89:23:81:87:a6:71:de:
59:5c:3c:76:2a:8f:40:ca:4a:0e:17:28:63:e8:6f:a4:fd:60:
42:10:7d:d8:8d:2a:f7:ab:52:80:2f:b3:7a:08:63:42:71:d9:
4e:d4:31:17:7b:cc:2c:b1:47:23:13:65:68:0a:8f:ee:58:bc:
5e:62:1b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:19 2025 by rpki-client