Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/826b6ddd-8a38-30c6-97ae-a5bf08c9e733.roa
File: 826b6ddd-8a38-30c6-97ae-a5bf08c9e733.roa (raw, json)
Hash identifier: PB8R5rUOJoNRIoyPqmGCsBpI2CC3S3FRYpDdx1zQz0w=
Subject key identifier: 24:13:B5:C6:CD:64:89:46:2E:21:6D:E1:0A:E0:F3:CF:39:78:DB:DF
Certificate issuer: /CN=df156af0-49c2-46d4-906b-5cf25869e65f
Certificate serial: 010D0C9F432858493D119D66B5C4EA2FC7B9AC80
Authority key identifier: B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/826b6ddd-8a38-30c6-97ae-a5bf08c9e733.roa
Signing time: Wed 19 Mar 2025 09:53:38 +0000
ROA not before: Wed 19 Mar 2025 09:53:38 +0000
ROA not after: Tue 17 Jun 2025 09:53:38 +0000
asID: 55154
IP address blocks: 140.235.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3d:11:9d:66:b5:c4:ea:2f:c7:b9:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df156af0-49c2-46d4-906b-5cf25869e65f
Validity
Not Before: Mar 19 09:53:38 2025 GMT
Not After : Jun 17 09:53:38 2025 GMT
Subject: CN=04d842df-b526-40a1-8f1a-7d826528fd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:51:0f:21:0e:0c:b9:99:47:2c:48:43:3e:
a5:56:e9:6b:be:11:ee:8f:59:8b:a8:6e:15:2d:e9:
97:c4:2b:cf:37:d4:79:b5:a7:7e:94:f4:f4:e2:3f:
af:63:16:b8:f6:02:96:88:d6:7c:ee:4e:7d:7d:5f:
41:65:ca:e9:30:7d:bc:d5:da:e1:a4:6d:4e:11:dc:
18:dd:8d:ed:3d:bf:c6:38:d9:56:ee:81:23:93:de:
49:5e:2f:4b:a6:3f:fe:1b:5c:7d:93:a1:3d:cc:4b:
76:27:71:04:52:df:7c:a6:c9:05:d8:67:8e:76:ec:
6d:67:84:b0:3c:1a:1b:30:eb:cb:fc:87:1d:45:6d:
e5:29:5c:8f:be:72:84:38:08:67:02:6c:99:3f:d5:
72:b2:ea:0a:1d:b1:99:7d:4f:1a:e5:4f:09:8c:47:
de:c1:d9:c8:3d:31:b9:53:16:3e:02:a6:de:64:4f:
05:ad:2c:8a:c9:01:65:1c:28:7c:06:86:da:1e:60:
38:df:a8:a3:19:e7:e6:b9:c4:a4:1c:1f:8c:33:2e:
0d:2c:8e:57:92:29:99:f6:50:2c:5e:64:73:34:52:
0a:f6:ac:15:a8:dd:ac:1c:7c:7b:92:1b:92:4b:5a:
83:af:aa:19:fa:fc:d8:9b:f2:a4:d1:7b:39:e8:e3:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:13:B5:C6:CD:64:89:46:2E:21:6D:E1:0A:E0:F3:CF:39:78:DB:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/826b6ddd-8a38-30c6-97ae-a5bf08c9e733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl
X509v3 Authority Key Identifier:
keyid:B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:4c:51:3a:f3:b0:7d:64:62:c5:aa:a7:59:94:f1:58:39:d3:
be:8d:45:56:8d:6b:c8:e2:ee:71:0f:8d:a8:04:ca:49:2d:5d:
cb:c2:3c:36:c8:eb:36:16:9d:66:9e:39:e1:39:b9:ab:bc:56:
9a:1a:c5:d1:45:a7:53:34:50:af:3d:03:cb:a1:ff:05:72:e8:
95:4c:9d:a0:c8:fd:b8:fb:ae:0f:9c:05:60:3d:39:b5:76:86:
bb:e6:e6:f1:05:e6:18:bc:01:cb:bd:ab:30:49:e4:42:88:f9:
b3:b6:73:5d:94:c1:1c:06:e8:cb:c8:df:63:bd:7c:26:d3:58:
a4:9d:9b:4d:e7:b8:f4:fb:7b:22:5e:5a:62:ea:d7:76:8a:46:
f0:8a:cf:f4:84:62:73:20:39:3c:99:3d:ed:37:4a:18:7a:40:
33:97:d6:57:ec:d1:a1:51:13:64:e3:41:3f:e3:d8:d5:ad:73:
9d:67:d5:11:fb:49:83:21:df:b2:71:ab:58:b6:f5:2f:ef:5b:
27:71:df:e3:6c:3b:7f:11:1c:c0:52:fd:10:3d:d1:f9:ea:e2:
d6:2d:86:7c:e0:6c:33:13:4b:71:8f:bd:0f:76:9e:c6:c6:42:
f0:62:16:20:1b:9c:1c:ca:fd:8f:24:7b:ac:3f:94:65:d3:d2:
95:39:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:09 2025 by rpki-client