Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa
File: 0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa (raw, json)
Hash identifier: aoKww6/jglUmiRDqT8t5/YXDzocS+2eBt6lqHkPIzC4=
Subject key identifier: E3:F2:24:E8:AF:70:D0:88:36:4A:65:AC:F7:36:5E:A0:85:8B:96:41
Certificate issuer: /CN=5f0271af-0900-4d68-9a01-e446c3910a39
Certificate serial: 010D0C9F4328584940397E1BF1E7BB56FF7F4E00
Authority key identifier: 92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 53356
IP address blocks: 140.235.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:7e:1b:f1:e7:bb:56:ff:7f:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0271af-0900-4d68-9a01-e446c3910a39
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=5b33a38f-2f24-4bb8-b4cc-134185a36b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:d8:a7:5d:d0:42:7b:57:35:26:43:7c:b4:
86:19:38:59:11:69:71:00:87:09:4a:51:e6:21:19:
3f:b6:b5:13:ac:4c:88:e3:f1:85:5c:53:73:a2:24:
db:1f:bb:bf:a7:b5:b8:e2:d5:fe:fe:b3:4a:7a:c6:
e9:72:30:4c:c2:69:e3:98:c4:71:c7:27:64:d8:86:
2c:36:a4:99:96:8f:ce:27:0c:88:14:9d:24:9d:ad:
e0:8a:63:6f:c4:8a:fd:15:8a:5c:68:ef:9b:8e:77:
bb:05:de:c1:21:e5:10:fe:c1:44:12:be:9c:f0:9a:
d8:0c:2d:4b:ac:af:2c:55:01:2b:61:d7:19:77:f0:
ca:e4:12:32:6f:f5:b8:7f:1c:ca:a5:8d:e6:cc:22:
46:45:77:ca:70:cc:55:07:3e:e6:d4:ac:08:05:30:
06:d5:8e:37:b6:c6:1a:ef:81:4e:0a:90:e4:76:66:
59:43:eb:cc:8e:2a:69:a2:4d:10:0a:fd:fc:a6:ce:
f0:60:01:83:78:5f:3c:eb:e2:78:c1:3f:d5:9e:ae:
ef:83:90:d3:6c:41:dc:96:5c:91:e2:38:d4:44:e9:
b7:a5:78:57:40:63:e7:39:68:19:0e:ef:20:e4:6b:
ab:94:bf:28:09:5f:05:01:96:54:23:7a:21:02:28:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F2:24:E8:AF:70:D0:88:36:4A:65:AC:F7:36:5E:A0:85:8B:96:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.crl
X509v3 Authority Key Identifier:
keyid:92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:72:82:5e:f2:cb:59:22:0d:26:65:84:98:22:c1:12:57:2e:
ce:d7:31:c6:b9:43:da:61:62:55:db:77:c2:7c:01:94:29:92:
47:52:a1:aa:68:d1:da:0c:4c:fd:d4:22:9d:f2:ab:28:50:be:
e0:93:f5:4a:fb:52:c3:9f:8a:ca:e1:6f:f1:bf:dc:42:bd:3c:
d6:20:7e:80:97:a3:68:c6:94:83:25:b6:d9:e1:86:91:b7:bc:
71:d3:16:2c:64:28:40:dd:15:81:1a:a1:6a:99:89:46:00:67:
45:8e:9e:9b:01:ad:5c:8f:97:56:87:c1:ea:d9:2a:84:9e:56:
9d:ab:5f:d2:55:a4:9c:f1:8a:01:66:cd:4f:94:e1:a9:e4:53:
3a:07:e8:e3:cf:6a:13:23:a1:a0:01:33:f2:e0:c7:74:a2:3a:
24:67:91:5a:90:30:86:d2:f7:af:7d:6b:b7:14:4a:6d:ad:84:
4b:1c:5e:bf:37:62:58:32:4d:92:12:db:5b:2c:0c:8b:38:62:
49:e0:7d:0e:ff:d3:bd:a8:a4:72:37:ff:6c:4e:1d:7e:af:0b:
b7:40:f3:75:23:54:74:e4:77:0d:1e:82:6a:9c:14:ec:1f:70:
00:c6:ba:9b:70:ad:0f:84:46:a7:96:28:11:4f:07:89:7a:b1:
6d:85:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:33 2025 by rpki-client