Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa
File: 8695139a-e96a-3566-9130-2d8de4f804d0.roa (raw, json)
Hash identifier: 2XE+CWV9L9YrPxhyb1MyUlgPBa5SethgcYPAmJjohk0=
Subject key identifier: 26:69:FF:5F:8C:23:F0:DC:3A:D1:00:CD:9F:8B:7F:6A:78:B0:F8:95
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848B8F0D1DC995BC8D88F8DF260
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 62759
IP address blocks: 140.174.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:d1:dc:99:5b:c8:d8:8f:8d:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=91cbd156-9853-4015-a77a-094878a70f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:4d:b5:44:89:2e:f2:42:ad:53:e5:bb:cd:
62:25:f4:6b:ec:6d:ec:12:4d:fc:3b:76:9a:b6:b7:
c4:6f:27:38:19:87:6c:e3:74:1a:90:a3:03:88:22:
a4:45:f6:3d:3b:13:a6:bf:6f:52:f6:43:b3:b0:1c:
ad:7f:d4:16:5b:b1:2e:78:f7:48:a1:ad:a8:c4:7d:
a8:7b:8b:da:3c:7f:97:2a:0a:be:b7:92:6e:3d:97:
fb:42:75:b4:3f:a8:d9:e3:0a:57:9b:b2:10:d8:da:
fc:ce:4e:7e:40:22:9a:8d:23:0c:8e:e3:67:47:87:
7f:96:a2:e2:71:b6:ff:34:0f:d8:b0:e6:72:9b:02:
52:77:02:3e:d3:90:43:2f:5e:f5:59:9e:d8:9c:01:
ad:e2:a3:b7:58:17:23:61:42:39:bd:d8:ea:38:44:
5d:ce:c6:40:8c:4e:fa:bb:f3:07:89:e0:00:3d:48:
42:7e:2f:d0:3b:6a:e6:cd:96:53:3e:44:78:cc:77:
6e:2a:e0:09:57:36:b5:c6:5c:4f:e0:8c:dc:dc:c8:
f5:f3:33:02:1a:b1:e2:83:72:ff:5e:ef:2d:4b:61:
ea:99:66:ff:82:85:1a:34:f7:90:4a:d0:9c:81:cb:
7f:50:0c:a6:47:71:b0:b3:31:8a:4c:a0:12:11:41:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:69:FF:5F:8C:23:F0:DC:3A:D1:00:CD:9F:8B:7F:6A:78:B0:F8:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.174.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:b0:78:e3:43:fa:53:17:9a:6d:ec:80:42:74:b0:33:35:22:
c6:3e:dd:3c:d1:66:76:2e:62:ed:9d:f4:3b:65:d5:ff:65:6c:
35:03:aa:13:52:f1:13:11:15:73:94:7a:50:15:70:4e:ab:47:
17:6b:fa:6f:03:aa:78:d1:59:38:28:ec:a9:29:0f:9d:36:38:
03:48:bf:35:23:18:9e:cf:8a:e8:45:8a:da:76:4e:01:24:82:
66:0f:fd:8f:e2:33:bf:a5:f0:fa:a3:76:f8:b9:bb:83:f9:0d:
2d:33:1a:83:b2:05:15:b8:56:06:ff:a4:53:f2:90:db:e0:5f:
d0:f2:ac:e9:68:2c:1e:93:bf:aa:6e:dd:2b:94:25:61:a5:5c:
a5:8e:6f:df:10:cd:e1:bb:df:e7:02:d5:08:00:10:cb:26:65:
94:63:b0:cd:b3:cb:ff:24:d2:95:22:04:98:f6:0b:16:0d:f0:
6b:8e:d1:d3:4d:8d:8b:7a:d9:c8:7c:fd:0b:82:a0:13:7c:b3:
be:3c:4d:03:cb:31:18:6f:5a:8e:6b:f5:f2:d8:cb:d2:d0:97:
95:d8:d9:d9:7a:6e:da:8b:68:cc:aa:6f:e0:00:f7:f9:5e:62:
9a:44:55:64:b0:9d:87:fe:36:07:27:3a:d2:be:27:88:62:fe:
50:14:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:34:12 2025 by rpki-client