Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/386116d4-0db8-32e0-8458-1f93640e0413.roa
File: 386116d4-0db8-32e0-8458-1f93640e0413.roa (raw, json)
Hash identifier: pjEUlYnuLdppAiayBQCYeXGXgKnb+hgDgCBnrtDK9YU=
Subject key identifier: E5:2F:90:95:F1:33:EB:9D:44:B9:65:94:B8:B5:56:DC:C0:30:5E:0C
Certificate issuer: /CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824
Certificate serial: 010D0C9F432858494469366EF7CBE04C98350540
Authority key identifier: BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/386116d4-0db8-32e0-8458-1f93640e0413.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 56647
IP address blocks: 142.54.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:36:6e:f7:cb:e0:4c:98:35:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=5ffa7d20-5366-45bf-a5d6-3ac57c7fe4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:e1:39:24:25:7d:24:1a:51:0a:df:87:d4:
70:14:b9:20:51:e1:7e:bf:ab:8a:b9:be:95:d2:2e:
13:2d:1d:9b:73:18:57:e1:2b:41:d6:b1:d6:7e:b3:
e3:22:18:72:0c:e0:68:36:2b:bc:a4:47:b0:7c:d0:
9d:06:d9:a0:af:cf:d5:b9:45:e8:c5:e5:8a:86:25:
03:bd:62:bd:b2:16:3a:43:c4:d0:d9:2c:b8:9b:12:
96:71:40:8e:8f:92:25:52:46:d1:4b:94:d8:fe:c8:
1c:42:3e:37:84:9a:b4:19:87:e5:13:61:88:b6:05:
8f:9f:ef:4f:0b:58:64:86:f0:5a:28:34:0b:6e:74:
2e:91:f5:f0:cd:cf:83:af:af:13:17:62:ef:bc:4c:
a4:47:2d:03:b7:7d:25:4d:99:1d:59:be:7d:f5:1a:
c8:88:d5:83:5e:aa:bb:e4:4f:02:ea:aa:d3:f6:a1:
5b:31:a6:0a:a5:fd:21:b3:ce:00:f0:66:b7:c7:b5:
45:94:c1:89:86:80:ec:c4:7d:6f:e8:3f:7b:c3:05:
bb:df:24:a1:70:57:0e:68:a8:49:53:5c:8d:e1:e9:
d7:01:d8:4a:d6:9b:26:af:7b:da:19:55:08:fa:27:
1b:6d:29:23:e2:cc:ff:45:18:22:10:da:b1:84:07:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2F:90:95:F1:33:EB:9D:44:B9:65:94:B8:B5:56:DC:C0:30:5E:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/386116d4-0db8-32e0-8458-1f93640e0413.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.crl
X509v3 Authority Key Identifier:
keyid:BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer
sbgp-ipAddrBlock: critical
IPv4:
142.54.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:1a:cd:ac:19:c1:bc:e6:93:2d:62:1a:f8:5f:a4:73:19:aa:
e9:5d:5d:f3:4b:da:37:ab:36:fe:90:e6:38:df:0a:d2:df:ed:
89:53:e6:26:1d:fe:f6:5a:6c:32:a0:95:a4:98:1e:c0:95:2e:
f0:98:45:45:f5:29:37:2b:be:ec:64:8b:e5:2c:e7:f4:0f:ee:
eb:90:0b:cb:cc:09:73:4e:64:ba:46:d9:02:f5:92:4e:3a:d0:
11:95:3b:d4:fd:3e:8e:98:b9:c4:e5:fe:fe:6c:e3:9a:08:56:
ec:67:78:17:c5:2e:37:23:25:92:57:3d:4c:cf:66:b3:33:b5:
48:53:b1:f3:ea:dc:f5:d3:02:4c:4e:40:f5:86:bf:d8:cb:f7:
73:97:76:cb:c1:9a:30:9e:a5:de:fa:64:7b:76:ce:03:14:26:
7b:ae:f4:be:e0:c3:fa:e7:bd:0d:d0:d9:ae:f5:1f:70:4f:9c:
53:fe:96:75:ef:08:69:79:3b:ac:2f:11:c9:ab:f2:08:12:6a:
29:e5:1c:a0:96:8c:f8:91:c3:8a:4f:4a:10:f6:d3:1d:7e:6d:
95:cd:1f:3b:38:e0:d3:1a:5c:76:ba:a0:b2:25:ff:21:17:63:
99:df:be:06:ca:cb:ca:72:e0:ea:2b:64:94:d0:0a:df:68:12:
94:82:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:28 2025 by rpki-client