Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa
File: f6064a69-8e2a-30ff-a4e0-a91669f30752.roa (raw, json)
Hash identifier: pryl+B6AjkViqIBpGCvhdjDXDrSlr9p2t/abzIY50bE=
Subject key identifier: 17:74:98:A3:EB:4F:D0:EE:3A:21:14:0E:12:85:45:BE:85:BB:55:E9
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F4328584925B3ABF90F98C4F93EBB0480
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 398156
IP address blocks: 158.120.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:ab:f9:0f:98:c4:f9:3e:bb:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=0d7b7df3-8328-48ed-ad46-678de01b9aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:f4:84:4a:e5:a9:8b:68:05:c1:f1:f8:56:
ca:f8:7f:10:df:fa:c8:bd:fa:db:91:de:fa:c6:d9:
60:af:65:62:88:9e:96:75:41:4e:fa:50:53:6f:a1:
5d:f0:bb:e5:ed:ad:36:5f:2f:01:dc:11:80:fb:c2:
44:63:36:20:43:e7:cf:87:b4:71:29:83:c3:6b:da:
1f:db:a6:be:1b:0f:9d:df:f0:43:14:5c:54:de:bf:
01:ac:fa:e8:1c:d1:4a:5a:5e:60:28:38:99:70:aa:
6e:fa:c6:5f:2e:b0:4a:ed:60:3d:64:3d:35:9c:4e:
b6:d0:97:90:be:88:67:4d:6e:f2:90:d9:f1:6e:ec:
e2:f8:b5:db:34:85:2e:cb:46:23:a8:16:db:37:53:
70:17:cc:0c:c8:d1:5b:5a:e5:73:9c:49:78:eb:e9:
59:40:58:d9:a3:a6:95:24:e3:8b:01:47:7c:2f:6a:
87:03:33:51:c9:25:8e:6c:cc:fd:5e:dd:bb:a9:4b:
a7:0a:b2:58:bb:2e:22:4d:a2:e4:3c:4e:6b:9f:20:
fa:91:d0:7c:6d:83:1b:a5:7a:6e:27:92:1a:e1:33:
ae:6f:6e:bd:ab:45:c1:f3:7e:ab:00:88:37:dc:d0:
c7:9b:08:fa:2b:9c:7b:d8:93:d4:79:d4:1c:bb:fb:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:74:98:A3:EB:4F:D0:EE:3A:21:14:0E:12:85:45:BE:85:BB:55:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:3c:17:6e:60:dc:6e:1c:28:eb:7d:14:7b:fa:92:22:e6:6a:
c2:47:22:db:0f:9a:80:bd:8f:74:55:16:49:01:4b:00:ad:a6:
a0:fa:1a:db:37:74:37:2f:c7:01:b9:e0:98:3e:61:dd:de:e5:
96:e7:d6:55:28:a5:14:03:f5:3c:21:79:cf:e0:b5:5a:40:b9:
cd:3b:cb:b9:70:b1:35:29:2a:16:1a:a2:66:5a:a6:c4:55:34:
56:e4:b4:7e:fa:20:07:f2:00:90:a3:55:a9:b7:03:90:8f:c4:
03:5b:8a:ba:af:a4:cf:67:36:55:80:f2:5b:25:c5:4c:68:a0:
ca:ab:9a:00:bf:e0:6e:9d:7d:3c:8a:02:61:c4:eb:a4:06:d1:
e1:2e:51:43:9b:8c:9d:56:7e:42:2d:47:08:a6:34:94:8e:1d:
48:46:ab:09:14:37:f3:2f:c7:62:67:e5:25:9c:e3:71:36:ea:
c4:e1:74:f7:69:09:f7:cd:52:6c:da:a2:5b:0d:07:67:e2:8b:
c7:00:e9:5c:e9:31:3a:ba:bd:9d:bb:1f:23:98:ac:b2:6d:15:
df:70:e9:d4:c4:94:d7:b7:41:19:47:29:55:2d:7e:18:43:1b:
ad:9f:93:7e:c2:cf:1c:d3:68:9c:6a:07:7c:38:e7:19:0a:5b:
5c:39:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:10 2025 by rpki-client