Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/86a41c5c-76af-316b-af4a-ab3a1415c760.roa
File: 86a41c5c-76af-316b-af4a-ab3a1415c760.roa (raw, json)
Hash identifier: OICS7xlxLIwT/C5SHgjEWeLmThDqvYMQEN32o2S8FfI=
Subject key identifier: 34:D5:AA:49:4B:79:2A:EF:C3:89:88:55:26:FE:56:11:8C:73:47:28
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F432858488DAB514053051C025A351B80
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/86a41c5c-76af-316b-af4a-ab3a1415c760.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 53356
IP address blocks: 141.140.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:51:40:53:05:1c:02:5a:35:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=efb2ef05-a146-40a8-b893-dadc589fa1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:fa:52:df:25:ed:af:5e:c1:0b:95:c9:c0:
7a:61:b8:a1:fe:e1:be:e1:9a:fc:65:03:04:37:c9:
8f:77:19:7d:f0:df:f5:33:d1:dd:b8:d2:8c:6f:7d:
44:f2:e4:54:63:94:7b:52:f1:2c:7e:12:de:2c:0b:
64:b1:eb:32:62:59:42:91:1a:32:f7:75:ab:d2:f7:
df:14:c7:22:5e:4f:a4:68:65:50:37:b6:29:a3:b4:
29:6c:50:b9:b0:31:01:1f:1a:ee:fc:11:1e:fa:f9:
35:3e:bc:02:6f:ad:b6:08:7e:5d:5b:29:a5:32:d5:
34:c6:82:5d:3e:41:24:06:e0:e0:71:85:3e:fe:a3:
6b:ab:af:74:b8:61:ef:bc:dc:71:7c:bb:a7:40:41:
5e:08:4c:c6:d3:05:1f:26:c8:96:35:c2:9b:32:e7:
a5:26:7e:d9:b1:00:bd:27:79:86:a1:c2:57:75:ed:
5e:ff:4c:2b:4d:fe:54:7c:0b:66:5e:48:c2:e0:01:
1a:6c:e5:18:78:91:78:ca:04:ce:5a:e5:94:59:18:
dd:a1:e3:fd:66:28:29:e9:82:3e:72:e4:81:f2:11:
81:a2:9f:55:22:f4:e0:6b:40:5a:90:82:65:22:4b:
6d:33:d4:43:c9:32:07:df:53:d2:f9:52:62:69:98:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D5:AA:49:4B:79:2A:EF:C3:89:88:55:26:FE:56:11:8C:73:47:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/86a41c5c-76af-316b-af4a-ab3a1415c760.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:88:40:18:8a:56:e3:c0:8b:c0:ef:b3:c3:6f:c4:e1:ab:d9:
9d:77:51:b4:86:2a:ff:cc:2a:41:5d:60:a1:7a:19:eb:3d:97:
1f:dc:e1:54:4f:fe:63:aa:a6:74:b4:a9:4d:3a:cd:71:45:aa:
d9:5f:53:a8:c8:98:58:03:8c:13:04:15:a1:f0:64:69:4c:cf:
5f:43:9b:92:80:6d:d5:a9:fa:0c:61:bf:8f:2e:17:57:21:fb:
04:dc:b0:ac:75:ff:17:72:c9:36:fb:31:c5:ec:7e:89:f6:cb:
28:ea:db:dc:5f:a9:d4:50:c3:dc:6e:7a:1f:30:8e:28:e6:f8:
77:5b:63:f0:cc:fe:e4:0c:ee:06:fd:cb:20:3e:69:19:5b:be:
57:7d:d1:19:90:82:72:c2:e0:ec:c9:5c:3e:5a:b3:b1:a2:fb:
d5:fe:d5:45:3c:3a:ac:f6:0c:3a:d2:e4:d5:df:eb:e2:5b:64:
93:34:54:6b:47:dd:cf:6e:54:f0:1b:09:69:11:32:27:16:a2:
f9:11:07:10:3c:6e:7f:66:ac:d0:0f:a9:07:db:6c:89:6b:bb:
6e:85:9e:eb:83:37:ea:dd:30:26:e0:e5:ad:48:0d:47:f8:eb:
4b:11:be:d8:c7:b6:85:b5:26:3e:9b:2a:d3:d8:ef:c6:b6:8a:
cc:ec:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:11 2025 by rpki-client