Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa
File: cd00af14-086a-320d-acc3-d521035dec44.roa (raw, json)
Hash identifier: o+pETKLqZkDVaiydRsj8lHYRy1UqjB2n+qgf5xJZig0=
Subject key identifier: C5:67:56:B1:AE:4F:FC:F8:38:AF:0E:2B:9F:38:1C:AD:D0:A7:37:FF
Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial: 010D0C9F43285848E5E1C02EE3244BB0DAC6DBA0
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa
Signing time: Sun 16 Feb 2025 04:21:52 +0000
ROA not before: Sun 16 Feb 2025 04:21:52 +0000
ROA not after: Sat 17 May 2025 03:21:52 +0000
asID: 36352
IP address blocks: 192.119.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:e1:c0:2e:e3:24:4b:b0:da:c6:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Validity
Not Before: Feb 16 04:21:52 2025 GMT
Not After : May 17 03:21:52 2025 GMT
Subject: CN=3733a75e-f06e-4b85-a8cb-5efcc328b7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:53:f6:6e:52:5d:8d:a0:30:7a:e7:61:25:
90:5f:b6:e8:06:db:64:c4:d9:f6:f3:61:5a:80:fb:
f7:42:dd:bb:66:c5:07:8f:57:f2:56:b2:e0:b7:59:
f0:37:3c:b4:65:3f:65:7f:2f:6e:a8:e5:b6:aa:78:
b9:c3:32:c7:29:93:cd:d0:2a:34:6e:3e:9e:40:b8:
89:f6:0b:36:ed:dd:0b:11:98:d2:ed:57:47:d6:97:
46:c6:ad:d6:ab:d7:c4:e0:96:54:71:56:78:2d:6a:
e3:a0:11:01:b6:e7:02:68:f3:a5:bf:7d:f6:b9:71:
d3:21:79:b9:99:e3:40:d7:de:68:12:41:15:68:f8:
b8:23:4d:7a:aa:8b:a2:d8:dc:c7:a6:4b:41:1d:c3:
72:00:06:84:9a:55:a0:b7:0f:53:4b:0f:2f:1f:67:
df:6a:f0:ba:1d:4d:fa:43:e1:e1:de:fa:1d:12:76:
60:f0:ae:92:bb:54:b4:5b:fe:f0:20:27:b7:d3:ae:
8b:ff:eb:0f:7f:bf:db:a1:03:47:c1:9c:41:e2:15:
e0:a3:0a:d0:76:14:3d:32:7d:31:93:8f:61:7b:a7:
f6:94:49:ea:6e:2b:a9:23:0c:8b:52:dc:81:c4:07:
be:7b:f5:60:6d:15:e3:4a:16:82:d3:77:50:16:f4:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:67:56:B1:AE:4F:FC:F8:38:AF:0E:2B:9F:38:1C:AD:D0:A7:37:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd00af14-086a-320d-acc3-d521035dec44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
X509v3 Authority Key Identifier:
keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:fe:eb:28:fb:3f:b8:e5:6c:3d:45:21:7f:d8:e5:6e:73:3b:
db:86:a3:a4:dc:84:c3:64:b5:b0:02:c5:66:37:19:fa:18:c8:
1d:23:07:e9:c2:ef:71:1e:cd:25:76:eb:9b:60:f6:eb:6e:9f:
66:db:c9:b9:8d:72:b7:51:52:a1:b8:db:b0:7b:7d:63:75:a3:
08:b2:71:60:22:1b:b9:f2:45:b9:29:fa:36:fd:f9:b3:62:13:
8f:53:8b:83:7d:d1:42:97:5e:99:3c:f8:ed:0c:7e:7e:d5:dc:
77:54:30:51:ba:e7:11:dd:d2:b0:41:7a:e8:f3:a7:06:cf:66:
94:e0:5f:ed:54:ae:4a:46:21:8a:34:6e:1d:ab:fa:30:44:81:
4f:4b:50:aa:7d:33:3c:68:d4:bf:a8:bd:79:1a:4a:17:dd:1d:
bd:57:b8:f6:b6:1e:e8:cc:16:45:fa:3c:65:b4:d9:2b:23:f7:
c2:8f:55:ad:ec:7e:5c:e9:19:81:22:e5:3d:55:79:54:09:93:
9c:54:88:d5:90:3c:40:b0:60:02:83:1b:47:52:cc:0b:7b:57:
6f:75:43:1c:8c:0e:49:99:b7:fb:6c:91:64:4a:b3:60:fb:2f:
76:97:fd:c9:47:c9:4b:e6:ce:6f:dc:45:9e:df:ce:46:12:95:
be:9a:78:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:49 2025 by rpki-client