Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/c9d4871a-f435-37e4-acba-07dba4150621.roa
File: c9d4871a-f435-37e4-acba-07dba4150621.roa (raw, json)
Hash identifier: qpz2CO/aXDX+U5gEN1KbQrJjhxZ0ffoci5uu31osadE=
Subject key identifier: F9:2D:59:5F:09:A3:83:93:30:B0:7C:D9:F5:0A:4F:25:72:7F:55:AF
Certificate issuer: /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial: 010D0C9F432858490E16CB8882E3937BC8AD3F80
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/c9d4871a-f435-37e4-acba-07dba4150621.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 36195
IP address blocks: 142.214.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:cb:88:82:e3:93:7b:c8:ad:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=c5ebc1ab-4733-4eb1-9ddc-fb0e882673f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:03:b9:57:ba:90:a3:66:0e:a1:ef:54:cf:
61:81:bc:e1:cb:e9:02:51:43:5a:23:c1:9d:4f:25:
50:34:ae:b8:b8:c6:3b:38:27:dd:ce:33:30:07:1b:
e5:c6:b2:b3:1c:b9:4b:4f:89:a1:e5:bc:92:68:f8:
9d:2c:c4:dd:04:14:e7:53:0d:2c:71:02:cd:86:4a:
60:64:02:b5:0f:84:2b:af:6d:10:ef:55:97:e7:5e:
c6:f7:07:c7:68:c3:01:a7:e5:9b:b7:4f:ee:c6:7a:
68:3e:23:90:be:35:3a:46:d4:15:b0:a4:c2:e1:c0:
8f:d2:ff:60:7d:4b:e0:9b:e6:5b:66:2a:25:76:ca:
26:3a:c7:87:c2:18:97:4d:ab:98:2a:c6:fc:19:5a:
1b:57:36:65:0e:7e:7e:80:3c:13:05:b0:9f:a1:9c:
53:f0:2a:ea:18:4d:57:e4:a1:8a:5f:c7:2a:3b:0d:
ef:f0:f3:99:cb:a6:af:12:c4:52:68:39:64:4a:75:
f4:e8:90:59:e9:60:49:7d:ae:1f:ae:23:87:84:34:
5a:4b:fa:6a:b2:ed:01:0a:7c:1f:76:8a:da:75:99:
c0:fc:0f:b1:f8:dc:1a:00:78:3b:23:42:8a:1d:37:
d2:9e:19:82:3b:ba:52:4d:ea:c7:27:56:b8:b8:ea:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2D:59:5F:09:A3:83:93:30:B0:7C:D9:F5:0A:4F:25:72:7F:55:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/c9d4871a-f435-37e4-acba-07dba4150621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
X509v3 Authority Key Identifier:
keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
sbgp-ipAddrBlock: critical
IPv4:
142.214.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:5c:d0:64:4e:6f:79:fa:9d:ae:9f:96:30:d2:36:6c:9e:a6:
35:36:23:2f:fe:e7:f4:77:74:af:20:66:ee:94:f9:4a:3e:22:
bc:ad:4b:eb:71:a7:7a:11:ef:cb:fc:ca:b4:e9:5b:a0:6c:c2:
96:b9:d4:aa:95:fb:54:9a:63:e3:41:8f:15:c1:64:c8:45:31:
62:c0:81:63:44:bd:4b:a2:c1:94:8f:5a:d7:7b:59:37:bc:24:
fb:d2:9c:7b:5d:26:40:78:10:e8:97:e6:19:66:e4:51:5f:86:
44:7a:eb:b6:95:2d:c0:51:f8:42:77:74:b8:1d:55:01:b4:cf:
03:50:74:1d:8d:a7:58:c9:04:d1:f1:ed:19:33:02:2f:e0:1c:
d7:97:f7:d2:15:a8:19:27:0a:39:fb:8b:e4:0f:e8:27:c9:4e:
71:ea:83:46:a8:7f:91:b8:33:ff:97:0f:c9:34:cf:65:8c:2d:
c6:d8:87:82:fb:66:60:69:da:bd:c9:60:86:36:24:4d:5e:6a:
09:77:d5:3d:30:af:ae:70:3a:36:0e:74:76:ad:6d:9d:82:de:
d7:0a:1a:60:96:c1:a1:b3:95:dd:cc:3d:d3:d9:7f:de:34:35:
c2:df:4c:1f:54:37:4b:c1:1d:66:5a:fe:00:9f:9a:41:b9:30:
6b:f6:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:19:21 2025 by rpki-client