Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6baf6a96-91ee-390c-bb00-213b5e27e1f3.roa
File: 6baf6a96-91ee-390c-bb00-213b5e27e1f3.roa (raw, json)
Hash identifier: 3mLgdov2ULudJ0nGgkLgRAwZWO/GmbxJkNFgfwjE8Ow=
Subject key identifier: 71:F7:D8:07:7F:05:BF:13:44:0B:D8:54:FA:74:D9:EB:89:FA:20:A6
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858494734013A17E134B8EB4D0280
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6baf6a96-91ee-390c-bb00-213b5e27e1f3.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 174.140.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:34:01:3a:17:e1:34:b8:eb:4d:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=8c5bb7ed-3995-43ab-b035-fca022f51656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:67:5a:5f:9c:bd:99:d3:09:49:d1:46:cf:
50:bd:27:c5:7c:04:15:1a:65:b1:93:d6:4f:2f:10:
f5:6b:7c:0d:7e:c8:af:19:44:a7:b5:21:fa:f2:4e:
ef:f0:e1:29:21:35:d7:59:d1:fc:66:8a:90:5e:1c:
60:cd:be:d3:8f:29:a0:df:83:04:e5:1a:48:a1:87:
d9:a4:5a:06:ca:9e:51:8e:b3:7d:f8:04:a1:a9:4b:
b3:32:11:47:c4:de:88:49:13:3f:ee:9b:93:29:97:
9b:10:16:39:d0:a7:9f:45:b4:b1:71:d6:6c:09:5d:
4c:6b:38:f4:13:92:c3:6e:9a:03:a5:44:b0:d3:d9:
ca:39:2d:27:f5:ac:df:3c:91:56:5e:f6:ec:48:97:
15:28:cc:4e:98:17:5a:16:9a:d7:3e:da:89:57:8c:
16:ba:a5:39:39:08:af:f7:b3:c1:1f:ff:3b:b3:79:
11:76:53:05:f8:d2:bb:86:50:15:e9:04:5e:52:c2:
e2:e0:25:74:8b:b0:51:5f:e8:dc:2f:f4:5b:40:46:
c9:a7:c5:9a:b9:5e:6f:b4:88:51:b8:25:8e:4e:a8:
42:2a:dd:13:e1:36:dc:19:a6:9e:f2:39:33:3c:9a:
26:0d:71:4b:22:f6:19:4c:21:66:67:98:38:9a:c0:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:D8:07:7F:05:BF:13:44:0B:D8:54:FA:74:D9:EB:89:FA:20:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6baf6a96-91ee-390c-bb00-213b5e27e1f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
174.140.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:e7:c0:1c:cc:09:1d:86:53:2b:cc:92:66:18:f1:0a:cd:df:
c3:fd:25:d2:88:ff:76:08:33:64:46:53:c5:1e:10:92:a5:6f:
1f:29:b7:3d:99:53:fd:01:7a:d2:17:75:bd:e9:64:3b:fb:51:
1a:35:9a:9d:cb:38:02:69:be:1a:c1:7a:0a:a7:dd:cc:3f:6c:
47:b8:18:8e:11:d1:78:57:e2:84:94:83:e9:c5:d4:59:fe:33:
7a:b2:f5:39:93:a8:a9:37:ac:7b:80:fe:80:5c:4d:f8:be:87:
fa:5c:68:78:b1:58:b6:76:9f:6b:cd:bc:44:7e:a0:44:7c:4f:
20:e2:70:fa:21:04:3b:80:f0:74:86:56:15:91:78:29:7e:c6:
90:b9:21:e4:05:af:ee:0a:03:89:f6:46:37:a6:50:f6:62:87:
e9:ed:60:9d:89:66:01:ba:0f:e9:c9:b4:5a:07:03:36:73:ca:
dd:c6:6e:3f:d5:e3:73:9f:d5:d7:42:2d:84:1c:0a:42:8f:60:
1f:bd:55:84:bb:5d:b5:7f:1e:20:91:bf:75:d3:7c:ff:71:93:
ed:6e:a7:54:27:cf:32:2c:45:2b:83:c9:a4:0c:eb:b5:f3:79:
44:7b:17:20:a3:ef:43:88:6f:5b:2d:9b:ad:34:90:6c:0d:36:
0d:76:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:44:38 2025 by rpki-client