Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10b3432d-0a1b-3a08-baae-f5661eeb4a5a.roa
File: 10b3432d-0a1b-3a08-baae-f5661eeb4a5a.roa (raw, json)
Hash identifier: bF+D5fipyu9fvSBkNC5VuAUtDJdgkDZWrrA3F/FtJ0k=
Subject key identifier: C8:73:65:55:72:9C:4A:82:AF:D1:2B:2B:D7:21:67:1E:33:5E:12:CE
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858494F93E840B61E73C738710B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10b3432d-0a1b-3a08-baae-f5661eeb4a5a.roa
Signing time: Wed 26 Mar 2025 01:00:40 +0000
ROA not before: Wed 26 Mar 2025 01:00:40 +0000
ROA not after: Tue 24 Jun 2025 01:00:40 +0000
asID: 25653
IP address blocks: 174.140.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:93:e8:40:b6:1e:73:c7:38:71:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Mar 26 01:00:40 2025 GMT
Not After : Jun 24 01:00:40 2025 GMT
Subject: CN=1ef16066-f217-4979-8b15-fbd79b80c36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:81:8e:ef:dd:ed:1f:be:d2:ea:36:b2:e8:
54:20:ca:16:83:d6:95:c2:ce:e4:69:df:7e:93:07:
4e:2c:63:5f:f4:ce:ed:81:4e:e7:94:6a:e4:c9:d9:
ea:98:8e:be:62:1c:91:22:fb:14:31:f8:ae:b7:9b:
92:37:b4:3b:ab:08:bf:19:2a:74:cb:54:60:97:bf:
9f:e7:5c:a8:40:6d:24:b7:b1:0c:be:d1:d3:6c:2b:
8b:bc:6f:f6:30:75:93:84:52:b4:de:d7:4e:0b:49:
83:82:da:45:57:07:9e:c8:5e:fe:51:d2:6a:a4:14:
51:9c:bf:66:5c:59:23:ec:45:67:2f:21:1d:3b:5f:
97:d2:e6:d2:49:43:1c:1e:a3:23:ad:f5:3c:29:25:
e3:4b:68:48:5d:e2:06:74:20:8a:29:cd:c7:0b:d3:
50:19:e2:92:72:9e:a5:f0:a0:19:c8:b1:d4:d5:e5:
fd:ff:a9:26:46:c9:46:4e:b2:69:55:39:ac:82:a9:
e9:7d:59:8e:53:3f:38:0c:eb:67:58:c2:cc:f8:6e:
e1:7e:11:8d:a9:ea:f8:31:97:90:10:bc:40:2b:74:
c0:d4:bc:af:0e:c7:6f:e2:ec:e9:e8:fd:55:cd:41:
ab:a6:fe:04:2c:84:1b:61:c3:e5:11:e9:3b:2b:80:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:73:65:55:72:9C:4A:82:AF:D1:2B:2B:D7:21:67:1E:33:5E:12:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10b3432d-0a1b-3a08-baae-f5661eeb4a5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
174.140.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:6a:35:1a:98:40:4a:83:da:39:52:ce:30:e6:b3:cc:35:22:
44:98:9f:84:12:89:c8:6e:0a:fe:16:e5:35:5b:01:c2:9a:ad:
9c:9d:45:b4:18:f7:86:d0:82:13:07:44:ff:9a:1b:b5:9f:25:
3e:64:0d:53:a3:2d:90:e0:7b:71:1d:b5:83:8c:73:94:67:99:
7c:aa:5d:e2:70:17:6b:e6:2b:ab:2c:9d:9a:11:fc:15:68:5f:
5d:33:23:04:21:bc:c6:e7:a7:e3:02:46:d6:8c:2e:f8:9c:8c:
a2:ec:41:af:b2:a8:22:2e:4d:3c:a8:6d:14:79:1d:5b:6c:37:
b1:29:e4:9f:e0:24:e6:b3:3a:04:7f:3c:4b:47:f6:36:1a:4d:
55:4c:ff:54:2f:b9:ac:b5:2e:39:73:75:b8:77:ba:e5:29:fc:
a9:42:22:02:8d:16:a2:40:0b:47:aa:60:24:39:46:a4:71:35:
26:f4:17:f5:07:7a:ca:f3:f7:72:5c:84:11:a9:f5:f5:8c:b5:
c7:c2:42:cc:60:af:d3:73:27:11:1e:34:e1:c4:3c:6d:36:33:
c6:95:43:e8:9d:ec:9b:f8:64:92:79:f5:60:dc:16:54:c5:2a:
da:1d:13:c9:d2:0f:03:6e:3d:3f:49:25:b3:24:b9:5c:94:87:
47:27:25:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:30 2025 by rpki-client