Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa
File: a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa (raw, json)
Hash identifier: /D/NxWpn/ThrEVcjY+C9T1LWJJAIHJ8Y+hT5aFRH50M=
Subject key identifier: 76:17:AD:2B:D5:74:89:97:86:E5:B4:BD:38:9E:7A:02:46:B5:67:55
Certificate issuer: /CN=9cf68654-01a9-4653-b981-d0349f39e0a5
Certificate serial: 010D0C9F432858489075E915BF7B94934838A100
Authority key identifier: 18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 7029
IP address blocks: 140.235.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:e9:15:bf:7b:94:93:48:38:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf68654-01a9-4653-b981-d0349f39e0a5
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=8749fd8a-67f1-4660-9a34-e5728cfc442e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:9d:7f:2f:cd:e8:89:a8:4e:b1:3d:0c:b6:
2c:db:0d:e9:a3:3b:ae:0c:12:cf:e2:ad:45:05:37:
49:b3:38:83:31:48:a9:69:65:e0:e4:a6:2a:9d:2b:
cd:60:e2:66:5c:9f:e0:79:64:9c:bf:2f:90:05:9f:
c7:1d:d3:c3:98:92:31:96:2d:80:12:e7:8c:07:da:
40:54:49:37:fe:16:71:f0:28:0e:80:0d:05:9b:e2:
2e:27:17:9e:40:a2:b6:e0:c0:24:da:f4:90:9b:69:
e2:d9:49:57:5d:f1:38:b9:a0:21:c3:7e:93:98:74:
10:09:af:1b:f9:b2:4c:d3:3e:ae:88:e0:aa:af:8e:
d3:12:5d:b0:ac:8c:d5:67:5a:06:71:7c:4b:52:3e:
23:70:8c:58:ee:75:fb:dd:3b:f6:3c:a9:8f:1b:50:
1f:74:c9:be:0a:c7:be:cb:bf:3d:88:c2:7f:47:28:
54:03:ac:12:23:4a:5c:3a:b8:72:0d:d0:ef:2e:8b:
dd:0a:b4:86:80:ff:74:7e:86:b2:74:5c:07:5e:7d:
15:ad:8e:8b:cd:ce:9d:79:4a:39:de:ac:f6:d2:9c:
2f:38:fc:4e:03:82:4c:cc:15:54:f6:18:30:e1:eb:
8a:10:a7:da:6a:36:8a:8c:6c:cf:47:86:ee:13:26:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:AD:2B:D5:74:89:97:86:E5:B4:BD:38:9E:7A:02:46:B5:67:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl
X509v3 Authority Key Identifier:
keyid:18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:17:ed:49:54:ee:a2:53:f3:1f:18:f1:33:9d:e3:aa:4c:ad:
09:6a:77:7d:52:f4:3a:3f:88:c1:69:c9:68:15:06:d4:1f:d9:
cc:bf:23:e7:bc:67:fb:bf:98:da:16:b7:4c:91:d6:57:01:bb:
65:aa:db:9d:13:32:cf:08:6f:a8:e1:84:ca:2e:82:03:cb:40:
88:e7:c7:3f:c2:96:08:b4:54:e6:d8:4f:d3:69:d2:fe:df:e2:
a8:6f:96:56:d6:61:75:af:bd:9b:b1:f6:3f:96:24:ea:4c:f1:
1f:ec:9e:1c:89:71:9b:58:2e:d2:8d:9b:02:cf:9b:4a:2f:1c:
10:e2:d7:ea:30:94:a9:92:f9:cb:cc:00:c5:39:e9:81:3d:c1:
13:3b:e4:b6:c2:7d:92:57:d9:89:e9:85:62:20:62:a8:50:8c:
e6:be:77:06:49:dc:5c:30:b2:28:3e:43:a9:9d:0a:0b:3a:9c:
f5:38:39:57:90:fa:df:55:24:f0:97:94:08:39:38:ff:50:8b:
f6:45:86:ce:b6:e1:42:94:b9:f1:00:ba:ee:fa:7c:d8:b6:ad:
6b:66:90:38:64:a5:6e:40:35:0e:c8:25:75:26:00:ed:e3:72:
ab:90:7a:ff:b8:2e:40:65:7c:2f:05:4b:bd:1e:13:33:1d:c5:
96:b1:9a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:01 2025 by rpki-client