Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0b5837e5-d4f2-3c84-8f0c-5d10bda3a003.roa
File: 0b5837e5-d4f2-3c84-8f0c-5d10bda3a003.roa (raw, json)
Hash identifier: wo/mRTUI6oWQsxxKYgS0fqLaXOTck6p2mgMOmW32gVc=
Subject key identifier: 58:CE:E2:EA:5B:B4:57:70:B9:4D:73:B8:48:F8:F8:D4:84:96:EA:9B
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F43285848F7C13DE72973A46B902F06DC
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0b5837e5-d4f2-3c84-8f0c-5d10bda3a003.roa
Signing time: Sat 22 Feb 2025 14:00:52 +0000
ROA not before: Sat 22 Feb 2025 14:00:52 +0000
ROA not after: Fri 23 May 2025 13:00:52 +0000
asID: 7029
IP address blocks: 134.202.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f7:c1:3d:e7:29:73:a4:6b:90:2f:06:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Feb 22 14:00:52 2025 GMT
Not After : May 23 13:00:52 2025 GMT
Subject: CN=6acafa95-191d-4f1c-824e-9ba97c6f30c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:29:86:b0:f3:26:56:2c:49:34:14:46:59:
5d:3b:3f:fa:d8:1e:83:7e:24:4c:29:ae:39:7c:fc:
03:1c:b0:38:54:c8:13:28:34:5e:f2:77:fd:83:d0:
42:16:f5:8e:71:ca:0e:81:3c:3b:95:31:98:23:55:
91:a6:39:99:6c:64:bd:05:5c:67:eb:51:b6:4c:dd:
2b:fb:20:50:18:cc:0b:aa:d3:79:e2:fd:73:66:87:
df:ae:10:1f:4a:8d:4d:29:d8:04:70:2a:74:2a:6a:
b6:7f:7b:41:13:b3:21:5b:12:41:f7:13:bb:90:b7:
ba:58:c9:95:e5:45:42:1f:0f:52:5f:7d:cd:b5:c5:
7b:5e:b8:74:1c:76:5f:31:76:6c:19:9e:45:29:82:
97:9d:ec:91:ad:d6:b8:bf:ac:47:7b:d6:01:b2:b3:
0a:0e:31:e1:fc:33:07:82:75:83:7f:82:b1:f1:ff:
cc:b5:a1:a3:45:27:46:48:f9:5b:a2:47:df:30:43:
2f:b5:c2:55:b5:4c:79:b2:77:3f:7a:ac:7f:3a:35:
31:c1:d9:c4:91:6c:c4:e3:04:89:d3:d1:c5:c3:53:
4a:09:41:2f:0c:38:80:6d:03:b0:a5:98:38:e1:a9:
4d:54:aa:83:3a:97:f7:92:b0:ae:1d:d5:db:43:f4:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CE:E2:EA:5B:B4:57:70:B9:4D:73:B8:48:F8:F8:D4:84:96:EA:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0b5837e5-d4f2-3c84-8f0c-5d10bda3a003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:85:44:00:5f:60:4e:64:c9:af:e6:6f:64:22:6e:03:60:3f:
0a:42:53:8b:96:b7:25:6d:5d:85:3b:00:a7:41:a6:b7:cd:0f:
eb:02:6a:d3:ae:b9:70:d6:b1:fb:22:98:68:0a:63:dd:39:33:
7d:a9:44:de:99:48:a4:dc:94:8a:6f:74:c7:56:ec:42:98:fb:
38:6b:c6:41:91:4b:52:8a:8c:10:98:2e:5f:93:d7:30:99:86:
3a:53:39:e9:2a:2a:e2:ac:25:b1:56:7d:9a:d0:dd:45:de:11:
e4:a5:92:47:cf:68:8b:db:44:24:65:cc:52:bf:52:5a:d0:62:
b3:a2:68:76:6c:ca:19:8c:ac:b1:2c:39:42:b3:05:32:41:4a:
8d:c3:72:94:55:e9:57:00:c1:8e:e1:7c:73:02:54:49:73:97:
80:43:17:cd:58:11:bc:b1:3b:d7:2b:e5:14:b3:48:ac:01:42:
50:18:b9:ca:62:47:7c:86:c1:7f:cd:72:a1:2d:20:e8:b5:f8:
f8:f7:76:09:4d:9c:39:c9:54:f3:9b:4f:28:5f:47:41:ae:2b:
c9:80:b3:14:17:0e:37:b7:b8:bd:5e:a1:45:61:b7:42:fd:b6:
59:56:02:ee:a4:1d:17:80:e3:8e:d1:dd:c8:f6:f9:84:c8:8d:
60:90:90:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:59 2025 by rpki-client