Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/8042a55c-eafa-3c1c-97b3-0303f663d0bf.roa
File: 8042a55c-eafa-3c1c-97b3-0303f663d0bf.roa (raw, json)
Hash identifier: WaW29x5yaUhbPxhUtG5ATzxVO6/3yS19VJITM0+4Gn4=
Subject key identifier: 10:3F:78:39:B0:D8:31:11:E5:47:18:68:E0:32:00:B4:3A:02:92:BC
Certificate issuer: /CN=df156af0-49c2-46d4-906b-5cf25869e65f
Certificate serial: 010D0C9F4328584924B44336F6EA2574BFEAB520
Authority key identifier: B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/8042a55c-eafa-3c1c-97b3-0303f663d0bf.roa
Signing time: Mon 10 Mar 2025 16:26:08 +0000
ROA not before: Mon 10 Mar 2025 16:26:08 +0000
ROA not after: Sun 08 Jun 2025 16:26:08 +0000
asID: 329007
IP address blocks: 140.235.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:b4:43:36:f6:ea:25:74:bf:ea:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df156af0-49c2-46d4-906b-5cf25869e65f
Validity
Not Before: Mar 10 16:26:08 2025 GMT
Not After : Jun 8 16:26:08 2025 GMT
Subject: CN=28711a91-455b-4066-abe7-c56f493486e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:1e:c1:7d:7a:4c:b8:d4:f1:eb:f3:28:d1:
78:02:9b:6c:b6:5a:84:4a:33:7b:c6:2d:97:c0:66:
3f:c7:65:37:3b:d0:4c:07:41:2f:34:a5:ed:e2:3f:
f8:45:cb:6c:41:14:d0:34:77:9f:53:24:0d:83:97:
45:1b:54:4c:ae:72:ea:74:31:99:3d:d5:b2:aa:b4:
06:f7:59:25:6c:bd:f4:cb:28:f1:5f:c6:ee:ed:95:
f7:e7:9f:32:83:f5:8e:aa:a3:f7:ea:6c:79:2a:c3:
9c:89:5f:ac:79:7e:04:1f:29:55:4b:04:7c:d4:7b:
5a:f5:9f:0d:45:4e:4f:ba:e3:a5:2d:7b:5e:2f:70:
41:5a:01:ab:af:1e:0f:a4:b0:e6:bc:1e:81:80:97:
93:bb:50:cf:4c:43:1c:35:bb:9e:57:ca:22:ea:2d:
98:ba:03:bf:bb:6d:76:55:02:f8:2b:3e:ad:05:72:
4e:0b:1d:98:a0:ec:49:de:3f:f2:e1:73:88:f6:2b:
72:b1:17:f7:76:a2:5e:6f:e5:b7:c5:86:12:a6:f6:
e3:6e:08:7f:3e:86:b9:e5:c7:a7:9e:b1:fe:2d:50:
90:6f:ae:d7:f3:e1:22:55:c5:27:c1:50:2b:64:69:
bb:14:bd:a8:67:84:5b:6b:0a:6f:4b:de:19:32:63:
5b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3F:78:39:B0:D8:31:11:E5:47:18:68:E0:32:00:B4:3A:02:92:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/8042a55c-eafa-3c1c-97b3-0303f663d0bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl
X509v3 Authority Key Identifier:
keyid:B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:d8:a2:7c:4b:7b:41:df:54:9a:af:08:86:50:de:10:19:5d:
f5:29:e0:39:44:88:7b:94:c2:a1:b7:07:0a:dd:49:6a:5d:fa:
b4:8c:12:77:0e:16:00:2e:81:67:50:d5:a9:b0:ae:6e:1a:cf:
0c:8a:87:e2:df:a7:5a:6b:a5:7f:b1:c3:e7:95:4e:38:65:39:
6c:c9:04:3c:55:eb:2f:e5:c5:ae:7d:8c:99:75:d5:a4:63:23:
6b:1a:53:3d:ae:b0:5d:66:73:fb:36:d6:b6:03:5c:74:b8:eb:
e4:51:c0:f6:35:9e:f8:1e:67:d7:20:31:12:c5:cb:7e:21:96:
88:20:41:75:a0:be:cf:ff:f4:a8:b6:c1:a4:7c:12:0c:54:07:
ae:04:75:b7:d1:41:9e:d8:3d:50:22:0c:b3:8e:c6:e1:86:aa:
58:f9:9a:d7:e0:7a:69:21:64:28:e4:da:ab:42:e1:37:ff:56:
9f:5e:80:10:ca:7b:3b:5b:3f:1d:7c:5c:f1:fb:c1:94:af:49:
ff:fe:ab:dd:02:98:11:16:8f:bc:36:71:62:df:08:15:da:5c:
fd:a6:99:dc:0e:0c:0e:cc:3f:3b:a8:30:8f:70:cf:e7:8c:8c:
e1:ef:63:79:85:87:aa:86:91:52:82:9d:2e:30:c0:ec:b8:5c:
b4:2d:9e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:21 2025 by rpki-client