Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/0bcc3297-1d40-3a7e-89d7-c26a61996a76.roa
File: 0bcc3297-1d40-3a7e-89d7-c26a61996a76.roa (raw, json)
Hash identifier: rTFdzQKa4zE9TriZVNd1Cm3CodIJvOa84OswWc7ygT8=
Subject key identifier: 90:91:B9:72:B9:FE:0D:BC:BE:C6:54:BF:B6:06:1E:C0:05:C2:A8:0C
Certificate issuer: /CN=4e5cccc9-30d7-416f-83cb-af13d1079fb3
Certificate serial: 010D0C9F43285848A29B503B5F46E639F6460820
Authority key identifier: A7:7D:99:20:83:4D:A0:3A:06:B7:F7:9A:D6:D7:9C:D5:69:9E:E0:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/0bcc3297-1d40-3a7e-89d7-c26a61996a76.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 397735
IP address blocks: 142.202.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:50:3b:5f:46:e6:39:f6:46:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5cccc9-30d7-416f-83cb-af13d1079fb3
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=3116f6dc-f88d-4d24-88e9-b3adb13fd029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:9a:20:5b:db:9c:2e:0b:1a:c9:d7:a2:24:
c4:a1:18:66:1c:aa:29:fa:7e:dd:64:4b:1d:ce:7e:
59:2f:40:d8:85:f4:88:3f:65:a3:d6:8c:72:47:7d:
18:dd:04:04:b7:38:3e:ce:fa:33:8c:d6:62:a9:62:
f4:3f:a2:c8:f7:60:74:17:ff:d7:bd:5a:95:8a:fc:
73:bb:73:61:55:a0:23:ef:9c:80:39:d8:13:ce:33:
7d:f1:04:b0:fe:01:10:d3:e6:e9:43:8f:53:4f:1e:
60:da:f4:08:87:57:d9:a3:3b:9f:cd:33:7d:18:74:
86:b6:e1:07:b1:df:1d:1f:85:bc:e3:be:c1:84:52:
38:cb:de:14:d9:f7:5a:78:ef:c0:ec:7b:e0:09:d0:
9c:09:b7:09:ad:f4:0f:2a:c2:2b:8d:2d:20:d6:a5:
df:b0:89:fc:09:fc:eb:98:ed:26:be:a5:c0:31:e7:
a7:d7:a4:45:cc:d7:9c:9c:69:08:d2:16:58:50:8a:
23:f2:c3:42:75:0a:f5:f0:be:ba:53:23:37:5e:fa:
19:52:b9:90:4c:eb:27:bd:6f:fd:9d:fd:03:18:5e:
6c:67:3a:f3:24:00:5d:ea:cb:f0:cc:c6:cb:f1:4d:
f7:1b:6e:e0:55:08:f8:5f:7e:19:56:a2:92:33:48:
8b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:91:B9:72:B9:FE:0D:BC:BE:C6:54:BF:B6:06:1E:C0:05:C2:A8:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/0bcc3297-1d40-3a7e-89d7-c26a61996a76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.crl
X509v3 Authority Key Identifier:
keyid:A7:7D:99:20:83:4D:A0:3A:06:B7:F7:9A:D6:D7:9C:D5:69:9E:E0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:71:ae:c0:47:b8:75:be:01:ba:1f:19:f4:68:3d:5d:b6:7d:
a2:77:08:15:c9:7d:81:57:56:62:f8:95:3d:78:4a:1a:54:bb:
d6:f0:38:e3:d1:04:be:29:8b:91:f5:8d:0b:b6:66:b7:2e:0c:
f2:aa:a9:0f:5b:b1:7b:70:db:69:8e:50:39:50:bd:6c:1c:62:
7b:3e:92:ef:17:df:1e:d5:9a:19:ba:1a:a0:b4:24:79:16:28:
12:2d:49:a0:c6:e8:7b:6c:c6:b1:f3:41:54:cc:21:7b:4a:09:
7c:90:d4:5f:c3:dc:c9:b9:f1:15:72:8d:03:d2:8a:b0:e1:a3:
5e:37:f9:1b:a7:38:9b:fb:8a:c9:13:e6:89:a0:3d:53:fb:d8:
12:8e:63:ab:aa:e2:55:cb:1e:3e:47:3e:ed:c0:59:c6:41:a6:
00:ac:e4:40:23:34:e3:16:a3:57:65:3d:14:95:dc:4f:fd:55:
69:76:4d:a9:7c:3f:d0:99:95:71:78:06:1c:51:c3:15:31:2f:
ab:c7:77:95:fb:94:68:8d:94:42:1b:2b:83:b2:f7:e7:cc:a6:
c6:cc:80:d7:49:f0:38:cb:ab:1a:1f:b6:22:2a:17:5e:a6:7e:
59:2f:08:61:5b:29:20:65:eb:e7:3f:d7:9c:5b:4e:45:49:65:
f7:94:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:40 2025 by rpki-client