Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/179172ad-2db5-37db-a4a9-a7fb2d70e7dc.roa
File: 179172ad-2db5-37db-a4a9-a7fb2d70e7dc.roa (raw, json)
Hash identifier: NVi9lsX8tYEEQlbDRPF91UQe3KhPIbUdXZlhFzPQz1g=
Subject key identifier: 6E:2D:65:24:BA:19:58:2B:4D:D2:39:2F:85:A9:59:9F:80:B3:2E:6D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584898D603C23D2B2BDCA2B57080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/179172ad-2db5-37db-a4a9-a7fb2d70e7dc.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 63949
IP address blocks: 143.42.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:03:c2:3d:2b:2b:dc:a2:b5:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=ea99b41b-c857-465a-a956-e501580c92da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:35:72:a3:c2:a2:75:27:e5:fb:72:8e:92:fc:
fd:68:38:16:d1:dd:26:c9:23:0d:5e:0d:01:48:b0:
07:22:3e:a5:58:2b:14:52:43:d9:b0:7d:ba:95:b2:
95:95:59:c5:b7:fd:db:06:cb:bb:ba:f5:8e:9a:62:
8a:58:7f:b1:0a:55:41:dc:fa:78:66:9c:86:23:50:
53:7b:37:9d:29:7d:8d:3a:c6:b7:a6:78:4f:84:9c:
1f:60:8e:56:a2:0f:b8:2f:31:37:13:00:4a:7c:6c:
b9:79:cd:e8:fc:30:f4:f6:8d:00:40:70:d8:84:33:
e8:42:c2:c7:9d:95:ae:d0:b6:05:33:38:62:4e:0c:
e5:df:ee:45:8b:96:f1:1c:85:6b:19:b6:ba:4f:fc:
d3:55:69:87:13:6c:aa:a9:12:10:50:f3:27:21:31:
04:fc:23:df:59:e5:82:27:cb:4d:53:ce:4c:8d:3f:
02:a5:14:bb:f4:f1:42:fe:38:d1:3a:ad:2a:35:e2:
ae:11:62:72:fd:34:11:42:95:77:39:00:a4:e6:97:
3b:70:8b:6d:97:69:21:c4:29:58:98:a2:71:2b:40:
1a:d7:85:0f:fc:d6:6e:87:21:6a:db:d8:75:f3:b3:
cd:d1:9e:c9:26:f2:ff:50:36:6f:08:2e:fe:4a:f3:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:65:24:BA:19:58:2B:4D:D2:39:2F:85:A9:59:9F:80:B3:2E:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/179172ad-2db5-37db-a4a9-a7fb2d70e7dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
143.42.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:f2:7e:63:4b:7b:0c:11:2e:7c:5f:bc:8f:c3:dc:6d:45:d7:
82:b5:b1:c0:68:e1:02:a2:d9:fa:7f:c4:68:9d:25:a0:73:f6:
10:63:34:b4:bc:2a:1d:a2:55:71:66:38:1e:84:7e:9e:5b:78:
f1:19:5e:24:e9:00:29:9d:31:7f:b6:93:61:59:18:b7:ca:9b:
20:8f:3b:00:80:2c:de:32:f7:38:28:c7:d0:49:eb:95:36:0c:
f3:ad:d4:d3:f3:2e:e1:a7:c0:19:95:69:4a:1c:55:e2:d1:ba:
07:21:df:fd:73:89:b7:b9:de:22:55:7e:7f:b4:0a:b3:ab:34:
2a:58:dc:29:91:fa:0a:4d:da:e9:b0:2e:a5:eb:22:51:6d:9e:
53:80:e2:82:35:52:93:3b:35:8e:0c:27:10:a3:d6:51:59:83:
ce:94:77:22:80:e1:6f:ef:e3:b5:6b:55:47:e2:bc:6a:a0:73:
e9:94:42:38:e9:7b:cd:28:90:f8:b4:d0:68:48:4f:f4:17:9a:
b4:70:ab:95:9c:bb:4d:3a:a7:52:23:c4:c3:e4:e9:b8:d4:60:
c4:a9:fa:22:aa:05:49:46:82:0b:a2:47:ae:88:e7:4a:09:14:
f2:3f:51:03:0c:b6:c5:e9:3d:4b:4f:12:49:8c:0b:8b:c0:cd:
6c:9c:57:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:42 2025 by rpki-client