Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa
File: 8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa (raw, json)
Hash identifier: T6d2J6HbKkFEAHuvqejL8WxuANDzgsh+DnOd42wBKq8=
Subject key identifier: 59:4A:51:62:B9:64:F2:77:54:19:BC:BD:82:58:53:65:EB:74:1D:2D
Certificate issuer: /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f
Certificate serial: 010D0C9F43285848BFEBA0AB158C742EE93823C0
Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 400211
IP address blocks: 142.202.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a0:ab:15:8c:74:2e:e9:38:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=0bd6fc7e-9fe2-4c62-8645-2314da88bb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:be:f1:dd:8a:97:e1:29:0e:30:2e:6d:02:
37:1e:b3:53:d1:24:90:36:13:94:7b:ed:3f:78:13:
a4:db:28:9f:9e:16:58:f1:81:5d:37:bc:e5:b0:4f:
7b:06:9d:55:bf:b7:44:fc:88:a5:5d:54:fd:86:9b:
3e:93:b3:69:4f:ca:86:a2:57:8a:82:fa:68:21:3f:
f9:a4:3e:40:c6:23:d4:a1:c3:93:ab:0d:3a:83:84:
1c:36:a7:a7:43:41:1d:fa:79:b0:6c:52:44:42:00:
ec:63:35:5c:db:e0:a5:72:44:55:c8:c1:77:26:ab:
ee:94:04:58:91:6e:1f:e6:46:1f:5c:b7:96:71:41:
bd:73:1b:46:8c:e2:7e:58:ca:29:56:41:74:5e:4f:
36:7d:a3:8f:4d:3e:6d:ae:c2:c5:13:95:54:73:7d:
c5:90:fd:0d:0d:fc:3d:fc:0c:e2:b4:1e:e7:48:2b:
f4:f6:68:89:2f:68:85:26:a9:54:b4:24:8d:4a:98:
4c:1b:97:11:b4:55:f5:c2:2d:ef:d7:15:89:56:6b:
b7:86:9d:c2:4a:97:40:a2:e0:70:5e:1f:c9:cd:96:
0b:fc:b1:5e:2a:e9:a4:77:a8:b3:a2:47:d5:88:47:
d1:20:60:9e:23:3d:6f:93:61:0d:0e:9d:20:26:c6:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4A:51:62:B9:64:F2:77:54:19:BC:BD:82:58:53:65:EB:74:1D:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl
X509v3 Authority Key Identifier:
keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:eb:97:ed:61:45:52:7d:cd:e6:42:d4:48:26:2b:1d:1a:fe:
ed:8e:e3:42:56:7f:68:53:25:a7:e6:91:98:e1:2e:36:02:33:
05:8b:38:6f:83:36:cb:be:fd:3f:e9:0e:44:ec:84:a6:58:16:
d2:cf:9b:43:ed:83:6d:6b:c3:9d:e5:6c:c4:35:a2:97:02:02:
93:45:4e:42:a8:3f:6a:d7:50:c2:b8:b3:2f:66:d9:0a:87:cd:
b7:d4:ac:84:c2:ca:95:f2:1c:10:10:47:5d:62:27:98:b1:54:
c1:ad:0c:5c:16:d5:41:84:68:9b:e2:ad:45:53:06:16:32:d2:
55:d3:a8:cf:fb:da:3b:1d:a8:c2:ee:52:1a:3a:06:13:4d:da:
8d:96:69:d7:81:3c:ac:3a:c6:59:57:d5:5e:35:38:dc:86:9b:
7d:2d:d9:71:bb:cd:51:b3:5b:24:39:ea:32:f2:e3:e0:e5:1a:
e8:c3:c9:78:4f:d3:d0:75:6b:54:62:e2:94:f2:19:48:6a:1c:
88:e4:b7:ce:81:fb:cf:ef:e4:e6:01:96:a8:a3:41:13:0d:7e:
74:f0:2b:b6:1f:17:c3:da:0f:c0:1c:9c:54:20:5d:dc:a9:de:
7a:f3:1d:5a:5c:c1:66:3a:fc:25:6b:61:32:39:4d:98:f3:50:
49:fd:40:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:49 2025 by rpki-client