Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a57f0887-ef80-32b3-9390-2daafb1d0ba5.roa
File: a57f0887-ef80-32b3-9390-2daafb1d0ba5.roa (raw, json)
Hash identifier: pKDPI2jH06nqGxw3/aSbBbzH9NUesefwDINnWYI/d08=
Subject key identifier: 40:93:CF:06:7D:C3:1B:FE:FB:FF:6D:AA:70:5E:8E:91:21:57:18:92
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848D0ABBC4A010A9889797B7200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a57f0887-ef80-32b3-9390-2daafb1d0ba5.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 204957
IP address blocks: 142.111.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:bc:4a:01:0a:98:89:79:7b:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=5d96c99f-4b9c-4c11-b0db-0f74475380aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:30:ab:98:c8:50:0c:92:ce:53:34:ae:4c:
38:1c:6e:ac:f0:92:6f:2a:e9:58:93:06:06:c3:d7:
0c:3b:74:e8:83:d8:f3:45:07:73:0d:30:fc:d3:5d:
de:4c:ad:4b:91:3b:7a:b4:6e:26:11:3f:4d:95:a4:
7e:9a:26:82:01:4d:33:85:39:89:0e:f8:c8:08:6a:
ed:22:18:30:09:ab:33:a3:fe:cb:c6:6e:1b:63:d2:
7d:68:45:6d:d0:d2:3a:4d:fa:dc:9c:fa:3d:6d:84:
58:3b:c1:02:a2:e5:cc:84:c2:5f:23:04:7e:9d:71:
71:d8:c9:5e:1b:da:61:cb:c2:5a:9a:b7:4a:df:83:
e4:ab:1f:98:56:4c:af:66:ef:b0:b6:2d:8d:3c:00:
cb:e3:a7:82:0f:93:76:1f:36:5a:3e:d3:1b:d7:42:
e4:a6:62:16:fd:36:30:01:50:ee:50:46:ef:9b:9e:
aa:23:2c:85:8b:14:40:f2:49:cc:59:9e:e0:fe:69:
8b:be:46:44:19:b1:88:09:50:d2:90:36:b4:40:41:
68:27:67:4a:ae:47:d7:82:24:b6:0d:9f:9f:75:e6:
fe:ab:18:32:f5:b2:b8:21:56:a4:4f:ca:2f:32:3d:
a9:0a:77:fb:62:7f:ad:1b:83:b0:15:32:f7:6e:e0:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:93:CF:06:7D:C3:1B:FE:FB:FF:6D:AA:70:5E:8E:91:21:57:18:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a57f0887-ef80-32b3-9390-2daafb1d0ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:53:d9:a6:65:0b:e8:30:2e:4a:29:ca:1f:8e:e7:00:d6:cb:
d0:51:ff:8e:27:f3:27:d8:42:71:3b:78:4f:1c:e1:0c:66:1b:
c3:e4:cb:47:29:e8:0e:11:81:05:6b:2e:db:4b:46:10:26:09:
8c:c2:b6:89:de:9b:44:09:84:cc:7e:00:0d:d8:7c:67:3a:1c:
cc:1b:c4:b1:3d:90:0a:6b:fb:03:73:c8:c0:9f:df:bb:33:a8:
4f:31:8d:d2:c8:2a:9e:ae:35:2f:e6:c5:7c:62:3f:2f:ec:de:
63:b6:31:b1:a2:16:41:1c:e2:d5:60:d1:5d:69:5c:0c:35:fa:
21:5d:c3:fc:fb:49:cd:1f:fa:4b:d5:18:f4:44:fe:1d:0b:14:
f6:e6:5e:18:5f:b9:d8:30:da:07:63:62:e5:a9:95:c4:1c:cb:
eb:8f:97:5a:2d:80:01:a3:76:96:99:81:b8:33:93:83:c1:10:
41:7e:a4:ff:2f:4d:12:e8:4d:ea:c2:56:70:da:72:45:63:80:
21:80:a8:99:39:be:f1:c3:42:0c:81:e5:d1:23:31:be:e3:98:
52:bf:1a:cb:a5:5e:31:21:d7:63:3b:04:8d:a9:20:bf:81:92:
f3:62:ed:a4:a0:4d:75:48:0f:b4:5e:24:3f:3f:36:2f:8b:3a:
69:15:8b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:17 2025 by rpki-client