Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa
File: cde87bfa-7d06-34bf-9c03-15214404e72e.roa (raw, json)
Hash identifier: 4D8IxvEkeORcSfjOwXPAfg6ELUNx+9rkGmqwX1i88kc=
Subject key identifier: 2B:29:8A:F4:7B:37:82:7E:BC:0D:20:F2:7F:5C:E6:A4:DB:3E:B8:D6
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285849071BF3D41CF86ECA4DA5A000
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 29852
IP address blocks: 140.174.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f3:d4:1c:f8:6e:ca:4d:a5:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=e8f5ebab-c343-4aa5-a5c7-dce32e99d7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:58:b8:d7:b8:0d:e0:da:d3:ec:c6:16:65:
8a:a3:27:62:a2:43:46:63:bc:fa:51:bb:de:a4:7e:
c9:2e:69:26:8a:28:d5:58:05:77:7f:f2:52:82:49:
62:33:78:48:fd:aa:a9:20:bc:fb:56:ab:c8:ed:fc:
08:d3:d7:2e:7d:74:e8:e0:29:f5:ed:bf:af:d0:a7:
b7:85:50:91:f5:c2:25:00:3c:7a:62:a8:91:cc:56:
2a:1c:11:80:5f:82:c0:da:0a:23:63:38:00:13:28:
54:9e:d5:71:ce:a3:21:bc:40:cf:66:07:b1:5b:24:
5f:14:d3:c4:15:e3:99:ce:f9:19:3f:52:74:66:c1:
86:d0:c0:50:6e:5e:59:00:d0:e1:b7:07:d9:27:08:
07:12:bb:88:08:d0:38:c1:f3:b3:40:16:03:1d:07:
c0:86:3f:fa:be:6d:1f:82:91:12:b6:cb:0f:ab:f9:
7e:c7:c7:ff:4d:9c:a6:35:96:21:a7:63:e1:33:68:
06:4c:15:7d:ba:28:36:c4:69:24:94:3d:2a:8e:be:
f0:9b:e6:ee:36:7a:00:e3:04:90:16:3f:b7:db:81:
bc:c5:e8:9d:7b:1a:4e:85:36:d1:31:0b:d6:cd:66:
a7:e2:3e:0f:46:c8:10:0a:26:d1:24:52:9a:9f:37:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:29:8A:F4:7B:37:82:7E:BC:0D:20:F2:7F:5C:E6:A4:DB:3E:B8:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.174.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:1f:8d:31:70:31:4a:29:ff:06:86:8f:89:fa:b3:9f:e1:31:
39:6f:cb:f0:84:67:a0:0d:1b:b4:ec:dc:05:23:60:10:2b:c3:
50:1e:86:0e:ac:06:ad:72:d9:a8:b0:1c:e4:fa:3f:c5:f7:a3:
53:7f:14:81:4b:c3:e2:6c:03:20:b2:81:9a:b2:de:30:fc:92:
f4:6b:62:5b:f0:36:31:57:35:c6:b8:6a:a5:48:41:cf:8c:55:
9a:d2:f5:3c:79:a7:f0:0a:79:e5:08:bd:12:67:9a:37:89:9c:
e5:cc:ae:7c:0a:d2:f8:4f:cf:c4:b5:bb:30:73:32:9c:19:26:
21:bf:5e:4c:ec:2a:e9:ad:b9:7a:c2:ea:98:ac:22:42:c2:11:
cb:99:02:69:2d:94:3f:c0:d3:06:97:19:8e:fb:b7:1c:10:f9:
88:75:55:20:7d:cd:fe:78:26:58:01:a0:7c:89:18:c7:3b:4f:
8b:75:3f:fd:8f:07:19:42:40:8d:da:86:84:0c:17:21:a9:e3:
5a:06:24:32:cc:76:ac:23:a2:ed:77:ca:3a:b4:76:48:50:c7:
aa:a2:fb:0d:29:ce:11:e8:87:b9:49:8a:2d:99:ea:56:16:1f:
73:a7:18:c5:b5:e3:e0:42:8f:61:be:f8:4e:ba:5f:5b:02:79:
0a:bc:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:23:49 2025 by rpki-client