Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/814d224f-9a4a-330f-bbc5-668fe7ef9d7c.roa
File: 814d224f-9a4a-330f-bbc5-668fe7ef9d7c.roa (raw, json)
Hash identifier: jjyqxP05gHGFpzJ2y17/KZtCc4F/u8qgvUye4WiXsts=
Subject key identifier: C6:32:46:92:83:89:C2:27:ED:DC:53:DE:F5:57:05:CA:8B:EE:61:0A
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F4328584925B3ABE94C10A97D9BDC4DF8
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/814d224f-9a4a-330f-bbc5-668fe7ef9d7c.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 398156
IP address blocks: 158.120.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:ab:e9:4c:10:a9:7d:9b:dc:4d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=f7246ffd-8021-48f7-bc10-09590155743b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:07:0f:0a:0d:f0:b7:14:97:1a:38:84:39:
e2:1d:fe:44:5d:a5:5b:b4:19:dc:c2:19:e4:50:54:
76:4a:34:3d:e5:ae:9c:49:64:83:c9:23:4f:c3:ff:
eb:1b:d3:a4:84:ac:a6:39:b6:f9:33:1e:95:fa:64:
c8:0b:3d:9d:94:eb:9e:41:3f:22:79:14:16:00:a6:
c4:a7:ca:c5:ab:5f:d7:41:7c:79:60:12:9a:10:f8:
4d:02:37:5c:e0:a4:13:ff:a0:58:3f:25:d3:dd:7c:
0d:92:03:14:1a:ea:b8:c6:69:46:af:fd:fd:03:be:
80:5c:c9:ba:6f:84:ae:e5:63:29:00:43:89:d5:d8:
d0:d1:18:56:31:7e:5f:b3:49:3b:02:18:da:bf:7a:
5d:82:e6:d3:cd:ea:4c:f0:a6:91:38:2b:c9:84:93:
48:c2:08:1e:5a:7b:11:6c:c4:7f:fc:70:f8:81:3e:
02:81:3a:d1:ff:c4:3e:03:64:47:32:cf:ed:97:36:
9a:3b:48:bb:6c:86:dc:d0:e6:77:c9:a4:cc:61:ac:
4c:17:c4:1b:40:ee:59:0b:14:e3:b2:4b:f1:05:19:
7a:f0:b1:4e:18:a5:00:b3:a9:73:3e:0b:d9:23:64:
11:00:1d:df:30:66:7d:a0:2c:2d:88:36:e0:54:b2:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:32:46:92:83:89:C2:27:ED:DC:53:DE:F5:57:05:CA:8B:EE:61:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/814d224f-9a4a-330f-bbc5-668fe7ef9d7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:5e:fa:0d:b7:9a:40:2f:f3:3a:ba:76:43:49:45:b2:30:65:
4c:8c:7a:33:f0:2d:23:33:f5:30:e0:41:bb:b3:63:44:44:e2:
1c:5e:cc:c9:d3:0b:ec:69:35:c1:dc:5b:2e:71:31:63:2f:5d:
d0:56:ef:76:3a:b0:02:08:80:9f:51:c8:9b:54:f4:b1:5e:6b:
42:31:2a:a4:a2:f8:83:c1:6e:fa:1b:f2:01:e4:df:17:c1:7c:
26:34:91:81:e5:47:a5:92:20:81:7f:5b:c3:15:f4:38:06:41:
0b:53:23:43:1a:9a:c5:04:5a:5c:f7:5a:07:2b:74:b7:70:7e:
ba:59:8d:c8:0a:2d:7e:b9:26:ef:51:cf:a9:bd:c0:2b:79:5b:
fa:cc:c4:17:48:7c:75:6c:43:ae:3e:b1:1f:88:af:98:88:23:
b6:8f:d5:be:d6:86:61:90:22:1e:6c:57:b4:9e:85:be:01:89:
e5:6b:74:76:ac:c8:cb:35:a2:cf:00:31:6d:08:44:40:e1:5b:
0d:3d:55:a2:2b:1c:4e:37:9a:ab:21:9f:e9:a0:fc:06:84:4d:
ad:98:bd:1a:b6:3c:26:e0:ef:dd:ae:b7:c8:6a:63:5d:aa:ad:
bf:ce:87:b2:1a:a5:ec:f0:6c:5b:9d:f2:f7:9e:11:19:2d:37:
c2:51:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:45 2025 by rpki-client