
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa
File: bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa (raw, json)
Hash identifier: 5mJDwJToetqTP9UY0MGH3QvLBMygAIQnp3IFZ631kV4=
Subject key identifier: 5B:75:BC:BD:55:39:30:3B:71:44:77:16:FF:99:EF:5E:6F:FF:10:6A
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584917DC3652F39D4C788789EA00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 20940
IP address blocks: 168.143.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:36:52:f3:9d:4c:78:87:89:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=9d7d2ed2-122a-4616-9875-794f3131df7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:ee:ab:08:79:2d:b1:59:4f:22:06:85:90:
f6:89:57:12:6d:75:3b:4e:01:bf:67:02:2f:28:53:
d6:e4:21:90:12:85:99:20:06:86:ab:64:cb:ad:a9:
5b:97:f6:a3:f2:cf:47:3d:27:e8:1b:aa:e7:b6:c5:
81:64:db:1b:02:e2:aa:e6:97:45:3e:bc:2c:b9:8d:
cd:d6:ba:17:a1:56:6c:35:ad:77:68:25:88:6b:b0:
57:05:cb:ba:fe:e4:10:1f:ed:3e:92:a9:ab:87:2e:
f0:0c:92:3c:4c:f7:fe:13:0d:22:33:c0:25:6a:43:
2c:b3:b6:97:04:a6:d9:b5:a4:a9:31:61:f6:99:9e:
f9:07:e3:e7:10:ac:c8:00:21:ff:ff:4a:b1:a7:04:
3f:49:d3:5a:c9:33:a8:01:9b:97:5f:ca:0e:b5:9a:
e5:e5:7b:7e:81:26:df:3b:37:9e:10:65:29:59:89:
ee:7a:3a:04:32:69:4b:db:6e:46:83:55:11:9a:f3:
dc:3e:da:f3:65:24:80:1f:2b:ba:96:ab:9b:ea:0d:
bc:81:f0:bf:69:99:93:7a:08:63:56:bb:e6:4d:1f:
f5:4d:22:a6:3a:ee:78:7b:8d:d1:8a:e0:4f:f9:be:
2d:3f:8e:7d:ed:8d:26:43:cb:d2:aa:02:26:45:89:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:BC:BD:55:39:30:3B:71:44:77:16:FF:99:EF:5E:6F:FF:10:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf31cae4-6293-38b8-ab84-725a6bd7bc95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
168.143.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:8f:41:a9:8e:17:6c:ac:0b:a9:5a:5b:c5:85:14:b6:42:2e:
b7:84:f5:08:64:df:3c:e5:ac:e8:2d:ac:0c:2f:c8:cf:6d:15:
76:47:db:86:10:2f:a7:3b:7f:a0:98:e4:28:1f:a6:10:5f:3a:
54:d2:56:03:43:2b:71:ce:38:04:a5:37:42:d5:05:73:6b:2d:
8c:6e:8a:a3:18:00:ec:d1:a1:cc:24:d0:d6:6a:3b:8a:85:5e:
1b:5b:be:70:30:7a:a2:2f:b0:e3:c8:c5:32:29:c6:a6:a2:b3:
e2:20:64:f5:fd:d8:47:a9:6c:71:43:3c:55:59:91:23:12:72:
12:cd:76:52:69:bc:79:b6:14:ac:41:0e:46:37:96:97:b9:c1:
35:a7:5d:2a:f9:91:b6:b5:b3:20:20:b1:01:90:1a:a7:4b:bd:
5d:13:21:78:e7:0b:90:89:09:e7:5b:b8:41:56:d3:78:8b:dd:
8e:6e:dd:2e:33:ea:35:47:e9:04:cd:d6:75:4d:5e:e2:3a:90:
60:0d:df:8a:8f:b5:e6:6b:0c:86:22:cf:5e:18:63:33:57:7c:
16:89:a1:b5:37:4b:e4:a5:fa:70:43:d3:30:b1:11:d2:56:93:
7d:85:f5:8e:0a:1a:65:31:e7:33:a7:00:e1:48:f3:f0:19:d5:
41:59:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:34:09 2025 by rpki-client