Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d0144964-0075-3e2e-b89d-e703395e3724.roa
File: d0144964-0075-3e2e-b89d-e703395e3724.roa (raw, json)
Hash identifier: r1iyXNxO/77ahJHPITcvrEAj/ijzU0q9n9zh3+1bTxs=
Subject key identifier: 22:B8:04:80:83:EF:59:C0:BC:A4:35:46:4D:20:44:B8:2C:45:2B:2D
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285848E068AC54E70BFA9618376400
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d0144964-0075-3e2e-b89d-e703395e3724.roa
Signing time: Fri 14 Feb 2025 05:18:52 +0000
ROA not before: Fri 14 Feb 2025 05:18:52 +0000
ROA not after: Thu 15 May 2025 04:18:52 +0000
asID: 64315
IP address blocks: 141.140.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:68:ac:54:e7:0b:fa:96:18:37:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Feb 14 05:18:52 2025 GMT
Not After : May 15 04:18:52 2025 GMT
Subject: CN=aa3b9a80-e5c3-4e61-b216-6ead5e405c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:2b:35:00:ef:57:a6:4f:b5:f2:ef:68:26:
ef:5a:20:e0:3a:2e:80:ef:51:1a:8d:83:f6:38:36:
65:71:f7:a6:21:e2:20:02:a4:ac:d5:05:c3:6f:91:
1c:18:d9:c5:7a:bd:2b:ff:c9:c5:76:87:8f:29:e4:
db:a6:0e:29:ae:1f:f8:78:9a:8b:45:a1:3f:14:66:
5f:0c:38:00:91:84:3c:33:d3:9c:91:75:4b:c6:f9:
0b:b4:17:b2:5c:e9:16:9a:da:1d:0e:01:58:99:a5:
72:7f:a8:cc:9c:02:7d:c8:67:c6:1f:b6:61:3f:ea:
df:14:7a:2b:40:2f:2d:1f:98:34:69:76:ad:af:ec:
01:d4:bb:c3:49:45:17:22:2f:71:e4:e9:70:64:07:
4e:77:b8:30:5f:c4:96:82:10:cc:28:5f:4e:ca:c2:
60:9f:98:fa:26:f6:fe:4a:81:ed:ba:13:5a:3f:81:
e8:7a:2e:ab:59:02:09:14:bc:a6:36:17:52:74:45:
b7:b9:7f:fb:40:c0:6d:48:76:49:3d:ef:40:d7:a4:
23:22:61:f2:12:14:af:34:eb:37:a3:9e:a9:68:42:
d7:35:cd:d1:4b:14:12:d8:c7:3f:79:e0:09:c6:c7:
30:4f:16:f6:ad:78:0d:53:78:21:7b:36:60:11:b5:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B8:04:80:83:EF:59:C0:BC:A4:35:46:4D:20:44:B8:2C:45:2B:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d0144964-0075-3e2e-b89d-e703395e3724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:c1:2b:df:a2:b5:c5:57:da:e6:80:4d:18:84:92:13:37:6f:
a0:57:21:e3:b8:cf:a2:78:35:0c:60:66:42:5e:99:9f:40:fa:
0b:c2:67:7e:7d:04:8c:9b:97:6a:4e:0b:db:67:e7:bb:44:cd:
25:6a:a1:5e:cb:45:87:26:c8:2f:e0:89:29:0e:58:93:bf:77:
b3:78:75:fb:f9:e0:99:1f:42:dc:c4:4a:07:6d:27:b4:7f:6a:
24:00:b0:fb:5a:37:48:1f:57:77:b5:31:c4:f2:16:2a:42:d1:
ef:a8:dd:45:c4:8d:c9:35:89:02:a6:25:c7:bc:15:68:d5:60:
5d:6a:51:2e:35:ed:fe:c5:24:da:4d:cc:d8:59:ff:30:23:56:
1e:e9:ed:c8:25:f0:5b:da:76:5d:d3:59:da:9e:65:0b:da:d0:
cc:de:53:7d:0d:39:92:15:18:39:83:58:68:dd:ca:99:35:60:
46:78:57:da:00:30:18:76:10:da:42:d3:e7:c9:9e:05:57:ec:
03:32:c9:49:3b:c9:40:fe:d0:c6:bd:2c:f0:bc:db:aa:78:8e:
ee:9f:cb:f3:17:66:42:de:3b:f8:2d:79:40:56:0b:4a:c6:3b:
cd:d6:9f:f4:84:8f:01:44:fe:8e:b9:58:16:c2:2e:42:3b:b6:
4f:3e:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:29 2025 by rpki-client