Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/df86681f-bee9-3581-a5c1-ecf2eefa4954.roa
File: df86681f-bee9-3581-a5c1-ecf2eefa4954.roa (raw, json)
Hash identifier: kz2FmP/3qGfM3RQsmJRtDYc8paI14YQLv8NDTIWaWes=
Subject key identifier: 51:2C:67:CE:F5:BE:1C:2F:A3:2D:5F:D5:48:24:29:99:88:00:65:3E
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848828091ED9C49237CD085B6C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/df86681f-bee9-3581-a5c1-ecf2eefa4954.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 62616
IP address blocks: 140.174.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:91:ed:9c:49:23:7c:d0:85:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=688e485e-79df-40c9-99f2-a548d574e8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a3:51:fe:7e:36:dc:5b:3c:0c:fa:de:a3:95:
6b:23:04:f5:77:49:7b:26:46:5c:c5:bb:f7:d3:84:
9f:27:da:b4:81:90:04:bf:7d:0e:4c:71:7f:45:c9:
cb:9e:40:94:7a:bb:a2:92:f5:e5:00:8f:3b:3f:71:
64:e9:b2:55:50:23:0e:c8:83:18:f3:36:a1:ba:0f:
06:f2:02:2c:40:84:7f:94:60:10:f6:d7:7a:8a:3b:
76:48:4c:a3:e3:5a:2e:82:68:84:85:9b:6c:db:57:
af:4f:4f:e3:ee:72:a8:f2:29:20:30:c0:5f:33:e3:
6f:1c:76:66:d4:53:db:6d:f4:47:d6:41:2e:35:26:
e2:f5:aa:7b:92:39:e2:2f:b1:0c:36:0b:d3:cb:60:
ed:48:3c:bc:f6:75:c0:b4:79:2a:89:66:8c:a3:49:
e4:6b:77:a8:46:a3:23:90:71:c7:90:fe:11:fb:28:
f3:68:7f:f8:64:b4:43:b9:91:38:df:eb:00:e3:88:
53:19:05:c7:ef:36:94:5a:d6:f3:f6:f4:5f:23:38:
1d:3d:21:c1:37:3d:86:42:b0:f6:b3:e3:e7:da:a7:
a8:91:3c:5b:ef:b6:da:60:eb:b6:10:c0:3b:60:76:
33:3d:9a:f3:df:1b:26:2e:82:fb:da:4d:fa:d5:70:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2C:67:CE:F5:BE:1C:2F:A3:2D:5F:D5:48:24:29:99:88:00:65:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/df86681f-bee9-3581-a5c1-ecf2eefa4954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.174.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:0d:15:66:81:ee:f4:be:b6:1f:19:5a:db:2c:4d:23:5f:63:
2a:60:9c:11:e0:54:3e:43:e7:9f:dc:8e:d8:98:3a:72:97:8a:
f2:62:0d:77:7b:cd:0b:ae:b3:30:8d:f5:41:80:c7:50:0b:9a:
b4:c5:bc:38:92:72:29:22:53:f2:86:c7:6e:0c:b6:b7:c2:d8:
fa:64:3e:6f:6b:9d:1c:73:0e:4c:3b:d5:c1:67:c3:56:a5:94:
01:de:af:c9:15:1a:a0:da:d6:cf:d6:c6:56:5c:ce:89:b7:10:
62:6d:29:75:24:00:13:ce:2b:3a:a5:15:9e:90:de:c1:dd:99:
0e:77:89:b0:2b:12:83:5d:27:18:d5:09:7e:48:b4:74:bf:46:
4e:a0:52:75:7c:b7:0e:58:04:93:46:d4:35:d8:36:ed:19:39:
2d:20:c8:c3:27:61:8d:c8:1f:49:05:89:68:73:9c:90:b9:c3:
a1:db:e9:0c:41:4a:38:23:28:dc:29:13:65:2c:e9:55:2a:6a:
70:1a:3c:f9:b7:3d:b3:03:b6:ce:5d:d9:e7:9a:a8:2b:ec:2d:
ab:20:00:14:6c:8d:9e:86:97:07:c1:14:5f:1c:12:c7:10:c9:
ef:23:e6:6a:4e:3e:b9:5b:bf:51:d1:ba:b1:ca:8f:d1:8f:fa:
b4:37:c4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:30:35 2025 by rpki-client