Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa
File: 19990b9e-a7ee-3373-9416-e00b1e3c189c.roa (raw, json)
Hash identifier: +sL/Uw7ekSJDY7caWRmszeHFkh8M5A771K7qDXVyzsQ=
Subject key identifier: 9B:BC:AE:F5:91:85:A7:4E:DB:21:6F:9E:7E:A7:C0:8C:30:3E:68:EA
Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial: 010D0C9F43285848DEA4AAE2AB5B2ADB8B9F0480
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa
Signing time: Thu 13 Feb 2025 14:08:08 +0000
ROA not before: Thu 13 Feb 2025 14:08:08 +0000
ROA not after: Wed 14 May 2025 13:08:08 +0000
asID: 32346
IP address blocks: 140.235.9.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a4:aa:e2:ab:5b:2a:db:8b:9f:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Validity
Not Before: Feb 13 14:08:08 2025 GMT
Not After : May 14 13:08:08 2025 GMT
Subject: CN=bf4cd462-24f5-4c4d-808c-5ce2c3e8fd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a0:98:49:95:23:09:e9:b8:df:76:7a:81:cd:
9a:72:4e:d1:70:2f:35:7d:fe:e4:06:14:e4:53:09:
cf:86:f7:2f:3b:f6:ef:da:b9:5c:b3:d6:31:ac:41:
1d:36:27:07:0b:05:0e:ee:4d:53:84:4a:0d:27:34:
ea:36:96:ac:58:42:8d:b7:ee:23:fb:60:94:4c:2b:
73:e1:5c:2a:83:c9:6a:3f:93:8d:3d:bf:d4:09:a7:
e0:49:a5:f1:c9:00:73:9d:91:ef:be:4a:f7:f6:23:
92:12:06:72:57:86:98:27:5a:d0:a3:ee:4e:4d:cf:
c9:c2:9a:7f:bb:5f:30:9f:5a:23:6a:05:cd:2b:a3:
50:3d:9b:c9:f9:bf:13:e7:8a:b8:59:76:87:4c:12:
f5:80:61:96:a4:42:78:c9:e3:13:c1:93:0f:72:3b:
bb:bb:40:96:16:7e:8c:1c:06:e7:11:b0:8b:68:66:
8f:22:59:08:49:44:0c:d9:10:89:53:e2:4e:d1:49:
94:54:63:3a:7d:cc:c1:67:c7:e9:76:53:92:5a:fc:
c1:1b:65:bf:f7:ac:3f:5d:49:5d:07:d2:f3:cf:79:
7c:36:37:10:5d:c5:47:a3:4f:87:a1:c0:fe:c8:7e:
50:31:60:aa:30:0d:c4:e3:a1:25:37:5a:70:6f:c3:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BC:AE:F5:91:85:A7:4E:DB:21:6F:9E:7E:A7:C0:8C:30:3E:68:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
X509v3 Authority Key Identifier:
keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:f3:f2:3b:1e:20:52:58:08:a4:5d:52:54:98:9e:95:d9:36:
79:9b:a9:68:f7:d8:c0:61:70:76:19:3e:25:57:66:28:70:3a:
c5:2a:dc:1f:6d:ad:9c:f5:57:90:e6:18:99:38:61:23:4a:8e:
ca:ad:7d:2d:20:0c:45:b7:91:76:6a:0a:49:19:bd:2f:0d:4e:
1f:a4:70:98:eb:89:cb:5d:28:38:84:28:3b:7b:32:e8:7d:7d:
28:55:62:ea:8e:ec:22:12:b3:54:63:b0:f6:63:16:a1:3d:98:
2b:84:d6:e7:9d:f4:86:cd:2d:45:40:f0:cf:f8:28:be:99:d1:
02:70:a1:bf:17:7a:4f:0b:00:23:df:e3:24:74:44:7d:03:13:
53:b0:91:09:c3:4c:d4:4d:3b:6b:40:c9:0d:3d:ae:9c:0e:4e:
b6:7f:10:01:8c:58:dc:d0:bf:16:e3:82:98:9d:7e:aa:83:d5:
43:fd:cd:aa:61:ad:dd:38:6c:4e:e1:6d:03:b5:ef:1a:bd:a8:
b7:ed:e5:83:61:0f:1f:c5:7d:45:81:8a:6d:8c:4d:e7:36:29:
76:d3:4f:18:f7:d1:ff:5c:69:38:9b:2f:e3:20:26:0c:dd:0e:
0f:27:71:21:8f:f1:33:9f:f9:08:86:9d:39:3a:85:78:7b:d5:
f0:da:a0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:00:25 2025 by rpki-client