Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/bdd32a89-f2da-3329-94b2-d5f74405a82d.roa
File: bdd32a89-f2da-3329-94b2-d5f74405a82d.roa (raw, json)
Hash identifier: kPooWZ2hDXP1T6AWpto3S8/2H/sabJYJBGlhdoAxask=
Subject key identifier: A7:82:AA:6A:FD:A9:8E:C0:EA:8F:BC:7D:E2:1D:77:B9:58:C8:EA:E2
Certificate issuer: /CN=618659a6-e7a9-4c1f-9818-42770f2b224e
Certificate serial: 010D0C9F4328584886B0747F91A36199A0BD4CC0
Authority key identifier: A7:82:87:80:EB:D8:74:26:32:E3:C2:22:C8:6C:D4:DD:4D:E4:B3:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/bdd32a89-f2da-3329-94b2-d5f74405a82d.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 33622
IP address blocks: 140.235.24.0/24 maxlen: 24
140.235.25.0/24 maxlen: 24
140.235.26.0/24 maxlen: 24
140.235.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:74:7f:91:a3:61:99:a0:bd:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618659a6-e7a9-4c1f-9818-42770f2b224e
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=925f6647-c1b7-4ded-8ca0-a2f0d6a3231c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:70:e7:39:dd:c9:54:72:76:38:17:f4:24:
8a:b3:27:e7:34:77:ca:71:91:9a:6f:9a:e3:d3:33:
4b:6b:5d:ee:b4:6b:f2:22:7a:d7:73:91:db:94:3a:
c3:32:d1:4f:d5:5f:0e:e6:e1:43:93:f3:df:1d:72:
e0:13:ac:3c:bd:92:f0:02:cb:3b:1b:b6:fb:74:4a:
6f:cf:c3:ee:d2:d9:b7:ea:54:b0:54:fc:3c:6f:1b:
eb:86:a2:cd:b9:24:20:90:dd:20:1c:39:31:17:d6:
91:4f:65:b3:19:72:14:48:4d:7e:45:24:46:81:46:
33:a8:51:bc:eb:47:e5:49:12:3f:3a:4b:d4:9a:85:
fe:ad:10:fc:3e:7a:44:25:67:a8:3d:4d:44:66:01:
b9:d2:75:02:6b:c1:41:dc:c6:55:c0:f2:0d:fe:09:
0f:fc:27:96:12:4b:4e:e6:09:ab:c5:d5:30:51:63:
47:c7:66:14:7b:28:8e:fa:5c:05:cc:66:4a:4c:db:
dc:ec:4d:8f:0e:5e:ec:d4:91:94:70:92:b9:58:94:
f6:d2:63:ad:c9:47:5c:12:8e:69:a1:cd:1c:35:95:
88:b4:90:bf:2e:e0:f0:02:bd:ee:c4:25:42:c3:b2:
1b:49:3f:51:e9:76:41:ff:c1:b9:cf:dc:eb:46:49:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:82:AA:6A:FD:A9:8E:C0:EA:8F:BC:7D:E2:1D:77:B9:58:C8:EA:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/bdd32a89-f2da-3329-94b2-d5f74405a82d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/618659a6-e7a9-4c1f-9818-42770f2b224e.crl
X509v3 Authority Key Identifier:
keyid:A7:82:87:80:EB:D8:74:26:32:E3:C2:22:C8:6C:D4:DD:4D:E4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:8f:05:e3:47:85:3b:0c:dd:09:67:39:9d:5a:ab:13:bb:2e:
3b:04:b7:c1:60:dd:47:d8:5c:1a:23:88:dc:d6:89:7c:36:da:
d1:25:a5:99:14:d9:cc:b7:e0:93:a8:6d:0f:b8:f2:8a:f5:20:
aa:9e:17:d9:b3:5e:66:62:5b:8e:6e:77:46:9f:9e:42:f4:2e:
86:45:16:7d:ee:f5:5a:39:2d:2c:b5:b3:6f:0e:5c:f2:4e:65:
29:e5:2c:64:66:62:f0:7e:94:5b:b6:30:8c:f6:3d:be:52:0a:
cc:e0:1c:9b:9a:52:be:e7:a9:ee:0a:49:69:8d:f6:db:d4:1f:
13:40:d1:3b:0a:cf:70:ce:49:c8:a5:31:d7:0c:fb:eb:ef:42:
ab:3e:35:a1:79:48:7f:08:62:c0:62:da:6a:ba:66:3f:e0:97:
77:28:13:e5:21:49:c3:e9:44:93:b2:25:1f:90:fc:b4:2b:cf:
79:e9:82:a8:32:0b:33:9b:d9:2f:32:88:d4:54:54:d5:6a:8c:
3c:7c:62:c9:df:4a:47:9b:f3:02:4c:a1:59:0a:cf:3b:c4:cc:
af:36:96:61:ea:bc:86:3e:37:d3:d9:97:e0:18:b5:07:f9:a4:
04:ef:5b:85:fc:bf:1e:08:94:7b:6d:76:6d:93:05:7a:0c:dc:
66:aa:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:31:08 2025 by rpki-client