Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa
File: d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa (raw, json)
Hash identifier: te0+4LNjL1/y0Pj41Ji2wDZU9LaXXjDn3rT4kov7iZc=
Subject key identifier: 41:A2:1A:67:0F:9C:C6:9B:76:5A:9E:11:F8:66:0D:4E:5E:0F:CE:3D
Certificate issuer: /CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
Certificate serial: 010D0C9F4328584897708956ADD45824CDEB4E40
Authority key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 14702
IP address blocks: 141.221.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:89:56:ad:d4:58:24:cd:eb:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=42b43ba0-c0e6-4d90-a8b5-79bceaac33ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:da:c4:74:6d:4e:ac:0e:0a:6c:f3:4b:90:
47:ba:7f:05:7d:58:cc:0e:93:9d:3b:7a:a1:f6:3c:
9e:fb:28:8f:0c:16:e8:7e:f6:e2:b1:82:3f:d4:bf:
1e:67:a1:8f:36:b4:65:ea:c6:6b:ea:66:eb:00:94:
c8:5d:a3:ff:59:0f:b7:02:8a:06:7c:69:d9:97:28:
5f:a4:ef:c6:f2:f1:c9:6d:f7:6b:f0:42:35:60:94:
05:8d:d3:c4:e8:eb:55:d2:a9:4e:69:06:06:e5:44:
06:dc:32:4b:5e:d3:5d:00:9d:b5:95:fe:90:c8:e8:
f0:ad:37:8d:b3:07:e2:d3:ba:e0:5d:1d:92:64:62:
69:4c:dd:f1:95:98:5c:01:7e:ca:fb:ce:56:d9:3a:
db:a8:56:04:a6:2a:14:e8:71:41:b8:4e:bf:93:c7:
bf:4e:1d:22:70:ed:25:4d:23:19:47:aa:6c:93:27:
35:41:1f:fc:b5:c0:c2:e9:fa:27:22:45:b1:3a:89:
9b:8c:2f:ba:f7:37:38:00:35:37:20:28:a8:f2:79:
d7:e8:86:74:f8:c3:f6:cd:90:b4:62:f9:6e:5c:ac:
45:a6:4c:7a:a5:d4:59:2c:fd:b9:33:61:e4:e6:7f:
d2:59:41:4d:fc:49:bc:ca:09:70:34:01:d3:09:fd:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A2:1A:67:0F:9C:C6:9B:76:5A:9E:11:F8:66:0D:4E:5E:0F:CE:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl
X509v3 Authority Key Identifier:
keyid:F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
sbgp-ipAddrBlock: critical
IPv4:
141.221.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:0b:17:f9:a5:34:86:64:1f:c1:ea:2e:bf:7d:e9:57:38:6c:
89:fd:a0:46:1a:09:35:d3:77:56:8a:88:42:0c:a3:71:0d:ca:
77:a5:ea:6d:90:77:2c:4b:ad:ee:87:26:28:15:40:7d:ec:09:
05:d8:4b:72:21:b4:62:65:2e:e4:c6:1f:c8:64:3b:9d:7e:f2:
27:f7:52:a1:59:47:e6:f8:f5:5e:d1:32:4f:10:ab:e9:4e:c6:
8d:42:8b:c0:ae:8f:b7:38:c1:54:b2:0c:c8:76:25:c1:84:12:
06:ad:6d:37:5e:ea:c7:98:ae:7f:b0:46:c3:ac:f0:cb:9f:9a:
19:2e:76:d2:ed:e6:1e:fd:d7:5e:a9:83:76:40:8f:f0:9a:79:
7f:65:68:77:c8:37:ab:64:21:24:cc:e0:b9:46:06:4b:34:7c:
c3:cb:9e:46:b5:65:c1:0b:e4:27:9d:ed:22:30:5a:c1:fd:eb:
ec:ca:62:a9:72:98:6d:7c:79:41:7f:f0:d5:44:4b:4f:b2:68:
44:6d:51:ee:5e:83:17:3f:82:14:90:95:d7:8b:55:95:31:11:
48:28:c6:85:4e:b2:fc:ce:1b:9e:45:57:db:cb:74:f5:41:58:
83:c9:46:4c:99:b5:d0:5a:34:9d:7c:af:39:80:5a:76:91:26:
80:7b:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:43 2025 by rpki-client