Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/df02aca6-3aed-3539-8f06-cb4eb7f70b42.roa
File: df02aca6-3aed-3539-8f06-cb4eb7f70b42.roa (raw, json)
Hash identifier: l21YfrlbLz/IIs9O9Bv6AoRMYQG+c7k2lbFS4vGT4Ik=
Subject key identifier: 38:AE:AD:BD:82:8B:DD:2A:F6:1C:A1:00:D6:56:61:20:BD:6A:F1:EF
Certificate issuer: /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial: 010D0C9F432858494733EA15FFE225578023C9C0
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/df02aca6-3aed-3539-8f06-cb4eb7f70b42.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 400384
IP address blocks: 140.235.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:ea:15:ff:e2:25:57:80:23:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=9dcac161-381d-4cf1-9ad6-af48c6c37cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f6:0f:25:09:1a:72:92:60:39:cb:ba:25:a9:
00:cf:3a:4f:8a:20:d1:19:06:f3:69:4c:68:c7:7d:
c3:f5:a9:b3:a4:1a:e6:b1:bb:7f:d6:c2:94:ed:9d:
b9:85:dd:b1:c4:12:bd:d5:13:ce:b5:27:2f:e1:d6:
70:0c:42:ea:e6:f3:bf:5f:f9:2e:e5:11:f0:a3:eb:
77:3a:3e:09:be:ad:a4:42:e3:d4:23:1d:60:c5:94:
7a:47:e2:24:fb:fb:ac:dd:27:44:3d:f2:48:92:13:
3c:3e:6c:e3:be:a9:dc:ef:f4:dc:56:10:86:01:18:
dd:07:f4:1d:12:a5:f5:c8:37:1e:37:10:47:c3:67:
ca:73:2b:a6:d5:b2:27:0f:a8:75:ce:2e:d3:73:40:
f6:9e:7c:6c:15:56:f8:d1:09:81:30:eb:13:3d:f4:
01:f4:1f:59:93:96:60:9a:50:13:02:6b:7f:94:35:
c1:37:ca:60:21:ac:47:ea:8e:4f:1d:31:95:db:c7:
d6:13:bf:ed:c4:22:b8:4a:6d:e2:e7:3f:71:a8:ea:
34:a5:c1:f9:22:3c:21:ef:c1:09:ce:38:b4:86:43:
e5:ae:b8:83:24:6f:74:fa:73:65:21:2c:d1:ae:39:
77:78:c1:69:51:b7:40:21:bc:b0:ae:e0:a1:06:0c:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AE:AD:BD:82:8B:DD:2A:F6:1C:A1:00:D6:56:61:20:BD:6A:F1:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/df02aca6-3aed-3539-8f06-cb4eb7f70b42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
X509v3 Authority Key Identifier:
keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:17:59:c6:0a:f0:40:bf:d7:ed:6f:7f:6a:8d:94:02:05:0d:
83:32:b6:14:3a:81:82:24:06:97:c8:1c:3e:ef:5d:71:c0:2f:
44:ce:b9:50:8c:5b:22:04:34:34:2c:f3:c6:d8:79:bd:46:9f:
98:20:fa:05:b2:e4:7c:c9:57:f7:4c:b5:ac:21:b8:77:ce:b6:
75:43:2a:a3:0a:eb:92:52:17:c2:f4:dc:2a:fd:e0:98:a7:cd:
c9:f5:0f:fd:fb:10:dc:10:a9:99:17:46:a0:80:b1:34:4a:36:
88:c4:c4:46:25:43:b4:0d:99:c5:0b:9c:11:a6:6c:84:f8:1c:
45:d0:a4:41:83:e8:f3:f9:f2:fa:0d:91:fe:6d:95:2f:f5:43:
a3:ec:3e:5f:5f:af:0b:f9:2f:d5:b0:0f:8c:aa:9d:2a:e8:0e:
c0:4a:c3:ef:4d:07:99:e9:60:57:37:f1:c6:53:7b:94:87:5e:
c6:f7:2b:ce:91:08:be:77:a0:da:17:3f:2f:b1:db:fa:1f:94:
aa:4c:3b:9a:14:cd:34:e9:5d:6e:e4:a5:d8:72:4c:f0:c5:de:
ee:a7:6a:f4:74:fc:18:e5:3e:7e:05:65:4c:15:27:54:46:b5:
31:b6:2a:59:e6:9e:31:30:2b:08:c2:f2:ea:22:cf:bd:4f:4f:
3d:41:4a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:19 2025 by rpki-client