Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/a3bcfd6d-06e0-3669-841c-4d6404410347.roa
File: a3bcfd6d-06e0-3669-841c-4d6404410347.roa (raw, json)
Hash identifier: xE+VLH5GT0vBzECYjnviZzR/UuNOwJhUBIyg+hEj+zY=
Subject key identifier: 1B:89:0B:19:7C:A5:A9:4D:40:C3:5D:A4:BE:C6:71:EB:2A:43:90:9F
Certificate issuer: /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial: 010D0C9F43285849071BF5B720C0FF7708FAA9C0
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/a3bcfd6d-06e0-3669-841c-4d6404410347.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 139070
IP address blocks: 57.140.12.0/24 maxlen: 24
57.140.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f5:b7:20:c0:ff:77:08:fa:a9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=c6b34544-2fef-4dde-bf4f-f79b5b542122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9c:c5:da:78:af:34:bf:1f:37:87:0c:49:c0:
d9:05:61:94:40:6f:a9:b6:82:d4:37:be:8d:2d:78:
03:92:80:3b:0b:4e:af:31:19:71:81:6e:dd:c7:37:
e6:75:b4:6c:59:aa:e4:83:6d:54:c9:94:c1:a5:94:
5d:30:d6:49:ac:cc:2b:8c:03:b4:c9:cc:51:61:29:
fe:8c:b4:65:a2:af:e2:2c:6e:9a:a6:10:63:b9:b9:
9c:1f:2d:62:e8:89:ed:f3:ea:05:58:97:cd:d1:12:
75:55:50:6d:74:7d:3d:80:e3:07:c9:3e:f4:75:d8:
9a:45:cc:28:c7:2e:24:af:5c:f7:81:33:01:db:db:
09:07:d7:62:2f:60:84:86:08:2e:ed:e5:3c:a5:db:
f0:70:1d:9f:03:d6:85:c8:2d:6b:c3:b9:94:6a:75:
6a:a0:58:58:61:60:9d:3a:fb:c3:85:ae:6a:9b:11:
10:0f:44:a6:84:d5:fc:26:62:5d:ea:86:f2:21:db:
5e:89:8e:b6:d3:4b:ff:2d:6a:b9:8b:de:1b:fd:07:
63:44:f8:33:bc:c3:e3:ce:ac:90:c5:9d:ae:19:a0:
41:93:e4:12:71:ba:0c:cb:99:d2:07:3e:34:35:c1:
04:1b:92:c7:f4:a9:78:ae:fa:d7:67:3e:d1:de:48:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:89:0B:19:7C:A5:A9:4D:40:C3:5D:A4:BE:C6:71:EB:2A:43:90:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/a3bcfd6d-06e0-3669-841c-4d6404410347.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
X509v3 Authority Key Identifier:
keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
sbgp-ipAddrBlock: critical
IPv4:
57.140.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:6a:8d:d3:04:9b:ee:d5:4e:dc:4c:bd:52:15:3c:79:b4:fa:
e8:a2:27:93:91:74:3e:0f:e4:a6:30:95:a7:7d:41:56:b3:66:
64:66:65:db:40:3a:22:87:8f:48:a9:e9:5a:9e:98:1e:03:38:
ab:33:ba:b5:7d:18:06:00:c8:53:f3:99:8d:79:4d:a9:c3:5d:
18:e5:f6:61:38:1a:6f:13:e2:8f:fe:02:db:d4:b8:a6:b1:fa:
14:6f:16:a4:e5:eb:16:78:3d:a6:0d:25:ac:1b:88:f3:d5:cd:
87:03:8b:2e:41:49:70:50:ec:ce:91:93:76:3c:e1:cf:52:b8:
75:cc:67:0c:e5:ec:6c:f5:f0:f6:46:f6:98:aa:be:70:bb:10:
2b:3f:52:f5:59:4e:69:d9:75:18:44:33:15:20:08:aa:81:71:
4e:ed:1f:5b:42:b0:45:78:5b:d9:f7:c7:96:82:b2:ee:50:46:
67:48:01:ad:69:44:60:d7:40:eb:51:2c:82:f7:c0:79:58:be:
95:f9:9d:94:21:c8:6e:c0:9d:75:51:11:04:dd:42:1a:3e:12:
95:65:ed:af:62:e2:c4:88:1e:fb:0f:98:90:47:0f:2c:8b:da:
c8:56:df:eb:c0:f5:39:28:d5:f7:9a:07:e5:33:bd:ef:29:29:
2c:c9:9e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:30 2025 by rpki-client