Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa
File: 549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa (raw, json)
Hash identifier: MugVTn64vH+iVT1+5SExzAnJyXrQj4lsDjaum5XEqt0=
Subject key identifier: 7D:4E:01:75:A5:25:0E:0A:36:B4:9F:E7:F5:EE:4C:1F:75:0D:A8:2F
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F4328584925B3AF55E1C7A8C2D22019C0
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 398156
IP address blocks: 158.120.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:af:55:e1:c7:a8:c2:d2:20:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=c4f6053e-20ac-4c79-84a0-9ba5c0f4fb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2a:03:42:ab:a7:0a:95:51:73:d5:20:cd:59:
bc:24:38:04:1d:be:d2:cc:6c:7a:e9:c2:2a:a5:32:
26:e5:8b:96:ed:32:ae:18:b1:4d:0e:69:67:76:cd:
7c:a6:5d:88:f2:c9:8b:73:a2:3a:65:51:ab:37:6e:
b0:3d:3f:f5:96:e3:bf:27:8d:eb:6d:e6:6e:a2:a2:
dd:96:d9:61:cc:a1:9d:61:9f:d8:e3:4d:e4:64:2c:
5d:f7:41:f2:7a:81:fb:be:be:4d:97:83:13:c6:52:
c0:18:6b:49:fa:f4:13:9e:eb:b6:ca:6d:9d:48:cf:
ef:3b:3b:46:31:76:37:07:95:d9:d7:a5:0e:10:a7:
33:af:fb:7c:5e:13:58:15:d2:20:40:63:bf:cb:dc:
a6:09:10:65:fd:f5:d7:cb:35:6d:64:88:97:c2:8c:
3f:08:26:b6:a3:91:19:59:10:79:ea:8a:37:1c:45:
4d:6e:9e:dc:81:21:1f:25:ff:fb:f9:99:3f:5c:17:
ce:d3:1a:75:73:19:c0:c7:d3:74:7e:4a:4e:95:36:
42:5f:39:0f:bd:18:ec:99:d6:29:2e:eb:49:63:99:
aa:c0:fe:00:00:a8:b7:aa:48:6c:56:04:ce:27:e5:
e3:62:dd:e4:68:ea:27:91:a5:7f:b3:6b:a5:aa:f3:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4E:01:75:A5:25:0E:0A:36:B4:9F:E7:F5:EE:4C:1F:75:0D:A8:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:03:09:ed:86:0b:fb:99:e9:58:cb:e1:44:71:bb:35:4e:e6:
2e:66:ab:62:a0:60:41:4c:9d:b0:ef:18:2e:16:cd:68:65:10:
0e:6f:b2:51:c9:4c:ad:1e:4e:fd:d7:5d:a8:4a:18:ad:0a:eb:
79:28:e5:f0:43:03:72:1e:39:34:58:b2:ab:cf:8b:27:eb:30:
4e:35:32:c5:ec:5f:7a:4f:e0:3a:e6:8d:76:d1:48:07:5c:a1:
27:63:b1:eb:5f:0d:54:a4:3f:3a:13:21:61:13:14:b3:82:ce:
26:63:f0:c3:a6:91:2c:fc:f2:74:da:11:f0:a4:81:7a:2c:69:
6d:0a:13:e7:24:a5:f2:6c:12:f6:c9:b4:5a:23:98:58:eb:ea:
dd:70:a2:37:3b:61:bb:5d:25:39:73:14:0d:6d:d7:e5:b7:fa:
c6:f7:24:bb:fd:ed:62:f0:c4:cb:28:87:11:a9:e4:6a:48:83:
7b:b8:9f:3d:23:80:fd:87:66:c5:58:e6:05:54:a7:4f:9b:19:
7b:d2:6b:34:3e:78:02:f4:ad:62:e9:d6:4d:6f:db:1a:08:73:
3d:0c:4b:04:c5:b8:e5:91:89:ac:53:83:78:32:bb:f6:2f:8f:
0d:74:1f:3f:fd:6a:04:ef:59:db:2b:57:35:c8:18:77:8e:af:
00:21:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:07 2025 by rpki-client