Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e7847cf-1ca3-3820-85be-905ee6db8681.roa
File: 6e7847cf-1ca3-3820-85be-905ee6db8681.roa (raw, json)
Hash identifier: yogX4tMxfQLojOYPgaz7a/t8fZvTl2QiCKeAjDCwLZM=
Subject key identifier: 29:34:DF:D0:7C:53:9F:39:8B:2C:C9:64:14:47:C5:40:92:4C:BB:07
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584917DC364449CE5BB7FBF230C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e7847cf-1ca3-3820-85be-905ee6db8681.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 20940
IP address blocks: 168.143.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:36:44:49:ce:5b:b7:fb:f2:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=3315bc27-fb80-4a76-beff-cdfa6ec1b20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3c:f9:18:c9:c6:68:cc:34:69:1e:e9:84:38:
7a:2a:68:3a:13:09:d6:68:ce:29:bb:cd:f9:bf:71:
ed:fc:d2:2e:d2:f1:ed:04:15:39:e1:cd:6b:7f:d2:
02:2a:51:f1:2f:21:67:ed:6a:75:4d:d8:c1:3a:f8:
fb:14:28:fb:6b:4e:da:c0:2c:1f:c0:54:98:47:c3:
22:b9:db:89:4c:1e:b8:25:d7:4f:e9:24:7c:60:9f:
f6:4f:74:f6:04:4b:6e:e9:58:6b:49:4f:15:ca:29:
03:b7:27:0f:ca:fc:58:ed:c3:9c:86:f5:ed:16:c4:
ae:5f:18:60:4c:f4:38:f6:72:c3:95:1e:90:d1:6a:
bb:aa:fb:cb:18:0d:cc:4c:0c:22:ce:7b:1e:6d:99:
f8:74:a2:c9:6e:86:a8:49:ff:6c:3b:16:e8:e5:df:
72:c8:21:51:ca:ad:ee:1c:3f:3d:2d:d4:62:4b:8d:
69:65:f4:0f:99:07:29:28:e7:22:94:32:9e:15:f7:
e8:d6:5b:cb:b3:bc:91:3a:44:8d:07:76:d4:a9:4f:
78:37:5d:cb:3c:ce:2d:29:d6:89:49:44:e9:33:a2:
25:85:c3:dc:5b:22:14:8c:0f:a0:13:33:a7:4d:e1:
97:9a:c9:46:ee:c1:b1:1d:bd:0c:c6:32:85:44:58:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:34:DF:D0:7C:53:9F:39:8B:2C:C9:64:14:47:C5:40:92:4C:BB:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e7847cf-1ca3-3820-85be-905ee6db8681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
168.143.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:d0:39:a7:84:b9:6a:e3:a3:bb:c5:8b:4a:ad:39:34:30:55:
ae:3d:1f:bf:54:75:c6:2a:aa:5b:e5:ef:ba:32:1b:b7:34:f9:
c1:3e:d0:21:ca:ef:4b:24:6a:25:ff:44:b8:5f:9e:e6:ab:2a:
42:bb:ce:dc:b2:95:b4:c4:7f:94:d0:32:d5:0f:3f:7d:2e:a4:
d8:ef:b1:d6:b8:28:6c:04:c3:1c:e1:32:fc:16:97:82:1f:e8:
f4:32:21:55:d2:b9:c6:23:b8:49:fc:99:d5:5c:b5:79:a0:89:
17:cc:65:c7:7b:73:46:c8:f0:45:7a:fa:0b:f4:19:5e:79:9d:
bd:4a:15:d5:b7:44:43:86:df:85:0e:b1:5d:d2:38:f7:94:96:
94:ec:30:22:a2:1e:f4:6e:8a:07:c0:52:c5:03:1e:38:e5:b2:
d8:c3:64:0d:66:b7:3e:8d:86:7e:68:92:19:ca:d5:a1:f0:49:
2b:90:a7:82:cf:72:6f:4a:a4:cd:28:eb:ac:87:a8:6e:79:ce:
3f:37:d1:f9:f0:b6:7a:45:a2:cf:a1:33:21:18:7a:83:45:50:
ae:55:79:3a:1c:60:8e:95:92:70:b3:25:07:12:25:92:e5:f9:
cb:a2:13:43:a4:cb:f5:70:e5:69:1f:dd:9a:8f:0b:46:47:2f:
10:b2:ed:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:29:22 2025 by rpki-client