Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/f13de659-f41c-3361-93d2-3574780b61b6.roa
File: f13de659-f41c-3361-93d2-3574780b61b6.roa (raw, json)
Hash identifier: 2CRNr6UVL1ygnrcKKJ5oGmaNkSw8g4Lh6wyuGoNPvH8=
Subject key identifier: BE:FC:14:0B:B9:49:E4:2B:66:64:F3:CF:AB:78:56:04:8C:7A:7D:DC
Certificate issuer: /CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9
Certificate serial: 010D0C9F4328584922D0ED1D2B927C0E93E92088
Authority key identifier: 7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/f13de659-f41c-3361-93d2-3574780b61b6.roa
Signing time: Mon 10 Mar 2025 00:12:16 +0000
ROA not before: Mon 10 Mar 2025 00:12:16 +0000
ROA not after: Sun 08 Jun 2025 00:12:16 +0000
asID: 6461
IP address blocks: 140.235.20.0/24 maxlen: 24
140.235.21.0/24 maxlen: 24
140.235.22.0/24 maxlen: 24
140.235.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:22:d0:ed:1d:2b:92:7c:0e:93:e9:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9
Validity
Not Before: Mar 10 00:12:16 2025 GMT
Not After : Jun 8 00:12:16 2025 GMT
Subject: CN=c0d18d09-84a7-42a5-b00d-29dbd26217e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:c6:54:e0:3e:11:66:da:de:e9:ff:6e:63:
53:72:7b:5e:ed:8f:f8:eb:0b:99:9e:a6:43:0c:79:
96:0d:f9:f2:79:73:51:58:58:8d:f1:27:b3:83:db:
a3:1d:73:5a:af:dd:92:ed:fe:88:83:58:9d:a4:2e:
62:31:45:b8:35:39:94:44:e6:70:08:bb:cf:45:e2:
81:5e:97:5d:e4:ce:88:9d:66:14:e8:ed:7e:92:ec:
e4:1d:ac:83:ee:4a:23:97:36:03:f3:36:47:95:95:
38:30:2b:14:48:ed:4a:b2:1e:73:6e:a7:5e:c6:d5:
04:a4:25:26:b3:db:4b:1c:59:26:ea:1a:8f:18:92:
54:cd:59:ef:d5:fc:ed:d8:08:cb:ee:27:37:14:bf:
c1:ae:da:58:ed:fe:da:26:46:ff:0b:f3:a7:0d:54:
96:68:5d:35:2c:e9:2a:2d:a6:c5:2b:71:5e:9a:22:
e7:e0:be:25:cf:05:4f:c6:ea:71:fe:13:2b:42:39:
5b:5c:36:25:02:08:ca:93:75:b7:d0:41:91:82:00:
33:f1:75:72:47:60:a5:ed:fd:0f:e2:46:54:97:83:
41:a8:f8:5e:16:e5:be:2d:1e:33:1d:1a:44:20:8e:
65:e3:2d:ec:80:b4:9b:8b:bc:b9:33:60:cb:ef:d7:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FC:14:0B:B9:49:E4:2B:66:64:F3:CF:AB:78:56:04:8C:7A:7D:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/f13de659-f41c-3361-93d2-3574780b61b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl
X509v3 Authority Key Identifier:
keyid:7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:7c:b3:11:21:5d:0a:a7:05:57:3a:ac:08:b8:e6:a2:e3:dc:
42:db:8c:f1:6c:87:72:5a:37:7a:8d:8f:83:bc:87:a6:14:e7:
e0:35:94:79:fc:37:e9:39:b7:39:51:e7:56:ed:8c:92:11:33:
47:52:b1:21:52:0e:2a:5a:5b:7d:69:6d:a4:b2:51:07:79:be:
dd:85:3f:7e:51:5a:f7:bc:2c:15:08:7c:87:19:ac:df:16:42:
c2:54:c4:5d:1f:c7:8f:d3:be:71:e8:dc:09:8d:59:4d:a8:50:
ac:d6:f7:11:df:3f:8f:c7:06:52:7c:1e:b2:c1:1e:dd:5f:9b:
67:2d:a0:4d:df:2f:66:7b:7a:12:50:84:1f:6b:fd:bc:ce:f6:
b8:d7:fa:62:1f:e4:43:f4:93:01:4c:73:c0:d0:96:65:4a:11:
ab:b6:a2:04:81:92:26:56:28:70:1e:5c:25:bb:ce:80:a6:dc:
98:ec:d7:18:0f:79:76:40:c4:86:81:ad:d5:17:e4:50:ec:d0:
2a:0f:72:82:26:f1:a3:9a:f1:63:dc:cf:4a:bf:75:94:cf:35:
50:27:bb:e0:28:24:93:d3:92:c5:63:4b:81:3d:db:63:ec:c5:
0c:e5:c8:d5:2d:96:01:c5:fd:19:e1:25:9f:17:e7:a2:b7:10:
0e:8b:6e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:41 2025 by rpki-client