Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/f8b890fc-9b58-36ed-9ff9-a808e502335b.roa
File: f8b890fc-9b58-36ed-9ff9-a808e502335b.roa (raw, json)
Hash identifier: jcqFkdUWXs1syo/NvXD4buAfky5B8xeAxPiCCtPtECU=
Subject key identifier: AE:FD:AA:49:E6:21:AE:ED:98:C8:53:7A:3D:B5:D5:DD:94:C9:0F:80
Certificate issuer: /CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9
Certificate serial: 010D0C9F43285848FFDFF9DAD7C144789F1DC100
Authority key identifier: 7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/f8b890fc-9b58-36ed-9ff9-a808e502335b.roa
Signing time: Tue 25 Feb 2025 11:49:18 +0000
ROA not before: Tue 25 Feb 2025 11:49:18 +0000
ROA not after: Mon 26 May 2025 10:49:18 +0000
asID: 329007
IP address blocks: 140.235.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:df:f9:da:d7:c1:44:78:9f:1d:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9
Validity
Not Before: Feb 25 11:49:18 2025 GMT
Not After : May 26 10:49:18 2025 GMT
Subject: CN=0650c5bf-4f07-4891-a7ba-89ed1ce17540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:52:d8:3f:82:16:26:97:ac:b6:10:ea:09:
f0:19:19:f7:00:45:6f:6f:35:7e:db:2e:42:80:11:
50:db:db:cb:a1:16:01:3e:d9:c8:dc:a7:e4:17:31:
ec:23:2d:51:84:bc:f1:47:83:5c:4a:ed:33:fb:64:
ea:de:8d:4f:8c:30:66:4a:dc:0c:7f:4a:3b:97:72:
7e:c9:49:80:0b:bf:cd:0f:e1:12:ad:7d:fd:27:b0:
ae:d8:af:cc:b2:45:13:7d:0e:9f:83:58:95:5a:a4:
89:29:f0:f3:60:4f:05:e9:08:ad:11:4e:30:d4:72:
fe:7e:1f:7d:5b:72:5a:5b:5d:2a:d4:45:62:89:2c:
5e:98:0a:7a:30:ae:4b:2e:e0:58:98:4c:2c:cc:b7:
81:71:0f:99:d5:06:c1:94:36:dd:cc:8a:94:93:a2:
59:19:ff:49:af:1e:a3:d4:54:13:e3:83:e8:07:a1:
54:02:3b:d3:b9:bc:8a:7e:79:d9:bf:2f:37:37:58:
b0:59:76:24:28:8e:ae:f5:ae:d9:34:e9:6e:41:4d:
f1:68:08:cc:38:73:58:1f:69:ce:71:a7:b1:3b:89:
be:71:ea:01:d2:61:a0:8d:fc:62:19:78:f7:74:ce:
e0:7e:75:c8:4d:95:0a:29:be:ff:96:13:81:39:98:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FD:AA:49:E6:21:AE:ED:98:C8:53:7A:3D:B5:D5:DD:94:C9:0F:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/f8b890fc-9b58-36ed-9ff9-a808e502335b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl
X509v3 Authority Key Identifier:
keyid:7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ce:6a:38:9f:60:39:55:58:1d:e2:bf:a8:ad:b0:ae:66:92:
18:c1:4c:71:83:43:9e:bb:6e:57:8a:98:f7:e4:ee:58:24:30:
06:49:a8:41:50:d1:4b:12:32:51:f3:0a:fd:7e:a0:fd:4c:e1:
b5:25:12:f8:3c:75:af:ab:3f:52:95:b0:29:00:95:1b:01:d9:
f3:c7:97:00:fb:e9:3c:d0:b3:be:d0:41:b3:a8:32:ba:75:ca:
33:5a:2c:f4:6b:53:41:06:7f:8d:a0:97:66:92:99:43:d5:1d:
0d:e7:f1:e7:e5:72:51:f3:0b:43:66:57:90:d7:e1:c9:85:a0:
84:6f:4c:d2:cb:c2:5c:33:61:8a:23:05:54:d0:ee:9f:65:2d:
20:6f:45:9a:a5:9d:19:48:f2:d3:1c:76:0e:93:ff:6b:76:3c:
96:b5:fe:4b:20:9c:1a:1c:b9:f5:25:f3:3e:e7:63:3c:a4:bf:
73:ae:47:5a:61:df:5f:44:e6:80:6c:1f:0e:35:1c:33:cc:ba:
29:46:86:08:17:fe:76:b5:26:27:25:01:34:f3:93:fe:01:f4:
5c:b4:a2:20:10:a3:ba:6e:ef:c6:91:9a:89:4b:1a:3b:38:72:
1d:bf:e5:73:36:3f:14:69:e9:4e:05:5f:13:87:74:d6:ba:bf:
4a:d0:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:28 2025 by rpki-client