Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c238fd06-6a67-34b5-bec5-9385c7c12667.roa
File: c238fd06-6a67-34b5-bec5-9385c7c12667.roa (raw, json)
Hash identifier: TPrTmukUoKVry0/ThUysGj21uXwQbwxaVkOyyldlzNI=
Subject key identifier: 22:10:D6:9C:10:C0:F5:60:78:88:F5:FE:73:B7:8D:14:7F:9F:88:EC
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F43285848A29B49BE661A0AA843857DC0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c238fd06-6a67-34b5-bec5-9385c7c12667.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 2381
IP address blocks: 140.189.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:49:be:66:1a:0a:a8:43:85:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=487b18d1-75f5-453b-9206-dd261d422a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:32:50:1a:bd:04:63:4c:82:5b:ac:e4:b2:
f1:1d:97:19:5b:75:d7:8c:d2:38:11:97:96:ad:c7:
ec:6c:5a:e5:14:24:7e:a6:91:22:ec:85:c1:c6:4a:
24:82:ae:fe:04:8b:2f:3c:22:9a:e6:28:10:d2:68:
aa:13:3c:98:94:da:ae:6d:81:98:11:14:48:55:69:
56:43:e2:a1:2d:1d:29:0b:26:1b:82:57:d8:7c:e6:
88:19:68:e8:51:99:75:d6:f9:11:e8:8a:ca:1d:94:
58:2d:dc:00:79:e8:c4:72:20:96:24:79:79:37:1f:
ab:a3:c2:2c:5a:c9:50:c1:0e:d3:5a:04:b3:cf:4d:
41:f6:be:9b:2f:9b:97:f1:9a:36:6d:37:d5:c1:6f:
b1:64:fd:4c:1f:42:7a:09:2b:87:27:9a:5f:3e:54:
67:73:44:c0:f9:86:8d:12:88:21:16:73:d8:e1:35:
99:5c:8c:0c:08:30:ab:d9:b4:1b:72:01:ff:90:10:
51:0b:e0:48:fe:67:a6:5e:27:91:4e:d1:ae:35:8c:
cf:0d:1a:fa:fd:56:60:1a:e4:27:b7:02:22:90:f0:
78:f1:0f:2b:8b:c1:58:ff:41:ee:a0:b5:3b:13:f0:
7f:7b:cd:3e:89:7f:4f:03:b1:4b:99:74:0c:94:46:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:10:D6:9C:10:C0:F5:60:78:88:F5:FE:73:B7:8D:14:7F:9F:88:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c238fd06-6a67-34b5-bec5-9385c7c12667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
140.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:2d:75:f9:37:0d:02:b8:b0:0e:b6:3e:86:45:b1:ea:02:c1:
c0:db:c3:9f:1c:19:55:e2:d7:da:67:fe:30:c0:2f:d5:70:09:
a6:a8:2c:8b:56:36:2e:5f:66:f9:01:58:cf:f6:db:b7:3d:e5:
dc:94:7c:5a:f4:7e:01:89:41:97:a9:c8:9f:f4:a5:84:0b:0c:
8c:d0:17:93:1d:b1:9f:92:05:0f:e8:6c:bb:6e:35:cb:cb:e5:
7b:d4:cf:a8:09:3e:c7:98:66:b6:70:bd:0f:33:63:bc:6c:b0:
a3:a7:20:c9:4d:6f:f9:c4:a7:97:95:4a:57:8e:5b:fd:85:9f:
5b:71:f5:ce:f7:1b:e0:fa:6e:b1:08:f0:c1:5b:49:a1:84:23:
98:22:1c:9f:39:72:1a:2e:03:23:4a:bc:79:c8:ed:1e:19:2e:
13:e5:d2:ca:1d:79:0a:8c:d1:c1:dc:63:76:92:b9:db:19:0f:
63:3f:1c:ca:1a:10:a0:10:fe:18:9c:0e:7b:05:99:49:0d:4c:
0b:99:a0:71:a5:85:fc:8d:a7:94:a0:4d:ec:fd:40:e5:0b:13:
25:c8:2a:d1:26:d2:fc:27:90:d1:e5:57:4a:e5:9e:fa:6c:eb:
ec:b7:9d:65:1d:51:5f:68:43:ce:53:39:6e:65:d2:9a:10:80:
e5:0d:07:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:14 2025 by rpki-client