Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/876e6a57-9c28-397c-8caa-960b5a867f9d.roa
File: 876e6a57-9c28-397c-8caa-960b5a867f9d.roa (raw, json)
Hash identifier: 5oGbiz5SpXbHtG+x74QLcgY3PeLmPwc+TmIkFX+VQgc=
Subject key identifier: 2E:0A:B8:89:89:9B:75:33:70:96:77:97:68:45:4C:08:31:E7:30:4C
Certificate issuer: /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial: 010D0C9F43285848E9E8726F1D00847624B728C0
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/876e6a57-9c28-397c-8caa-960b5a867f9d.roa
Signing time: Mon 17 Feb 2025 14:58:35 +0000
ROA not before: Mon 17 Feb 2025 14:58:35 +0000
ROA not after: Sun 18 May 2025 13:58:35 +0000
asID: 834
IP address blocks: 142.214.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:e8:72:6f:1d:00:84:76:24:b7:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Validity
Not Before: Feb 17 14:58:35 2025 GMT
Not After : May 18 13:58:35 2025 GMT
Subject: CN=993012d7-d5e5-4372-8150-0e9342651468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:76:cc:cc:26:0e:cb:1c:81:b3:e9:fe:3c:
66:78:f6:56:94:0a:57:33:b1:58:82:0e:45:a9:4b:
56:20:00:f5:bd:ef:b5:ee:11:99:07:95:94:bf:a1:
4e:f0:77:53:79:9f:9b:db:33:1c:a8:63:81:21:a0:
a9:bd:99:10:fd:6c:5a:b6:10:5d:fd:98:ba:e5:e3:
8b:9b:bf:30:e2:e4:02:ab:de:94:20:12:f2:cb:df:
94:ab:c4:ed:29:b3:10:b3:23:69:5c:4a:3f:57:8c:
41:bb:1a:0f:ea:53:60:59:7e:73:2b:f0:c9:7a:8b:
66:64:d5:45:01:65:53:ee:27:67:cf:e5:ea:27:f9:
91:21:86:9d:45:94:6b:d0:dc:69:27:37:ad:df:18:
b0:0e:57:28:26:e0:2d:af:15:c2:4c:6c:62:78:aa:
2d:fd:75:8a:32:61:e7:4a:5f:be:27:25:3d:18:78:
0e:35:c3:8b:a0:96:4b:0b:81:93:5c:df:bd:4c:e4:
36:3f:0e:41:05:f9:b6:07:e8:a6:5c:6a:29:4f:82:
e8:df:fc:89:05:b5:87:80:17:e5:7b:1c:db:d2:19:
10:98:10:8c:fd:e8:17:83:31:7c:68:d3:83:96:35:
2d:5f:e8:f5:29:49:20:cf:42:3a:e5:c9:da:4e:96:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0A:B8:89:89:9B:75:33:70:96:77:97:68:45:4C:08:31:E7:30:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/876e6a57-9c28-397c-8caa-960b5a867f9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
X509v3 Authority Key Identifier:
keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
sbgp-ipAddrBlock: critical
IPv4:
142.214.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:51:0e:91:82:ca:f7:3e:50:fe:88:9d:9e:4c:18:17:25:33:
74:be:d5:c0:b2:11:32:fa:bd:80:05:d6:6d:30:47:7a:bb:d7:
4b:21:62:3b:0b:6f:a7:25:78:99:99:57:1c:7d:f3:6b:da:fb:
15:1b:43:96:5e:d8:04:74:4d:8e:02:7f:3e:31:3a:c1:16:e4:
bc:03:5c:7a:36:c8:11:68:ca:de:1b:ad:e8:f5:24:75:27:87:
93:f1:c0:87:3a:4a:ba:18:80:3a:b8:bb:86:3b:81:94:23:78:
a0:a8:d6:cd:32:4a:14:3b:5f:4e:54:19:38:4c:3a:68:b1:e3:
80:57:db:2e:c0:10:b0:df:a9:f5:4e:05:aa:72:06:ee:63:5c:
64:8b:24:b2:fc:81:79:28:8a:a5:73:4e:19:d2:2c:23:b2:54:
16:23:18:fc:ab:9c:c2:e9:da:c4:68:0a:56:89:d1:cf:d5:96:
b5:06:1f:fe:f8:6f:fc:3b:d7:58:eb:84:07:2e:25:66:2a:cf:
ad:fa:c9:d8:76:7d:26:fa:d4:48:23:58:21:10:89:6e:83:9c:
3c:5f:d2:99:99:00:fb:ca:25:ef:d3:38:3a:d4:1e:1a:e3:33:
61:76:fd:2b:14:e6:50:9b:08:22:e0:57:df:d4:b1:e9:ba:ff:
be:e6:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:34 2025 by rpki-client