Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2bb7aa4-2b0d-3735-8607-f75c9d7d49a0.roa
File: e2bb7aa4-2b0d-3735-8607-f75c9d7d49a0.roa (raw, json)
Hash identifier: 99Q8tRrQ5tzdLPiofKxNRfGHOw6JEqnEiZoaYemznEo=
Subject key identifier: B4:16:C3:EE:7D:68:A9:37:E9:98:B3:D8:F9:CE:F2:49:D1:46:FC:D2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F90346FA6838ECE40040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2bb7aa4-2b0d-3735-8607-f75c9d7d49a0.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 141.149.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f9:03:46:fa:68:38:ec:e4:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=da31c030-006b-4c4f-91b6-861117ad6de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:93:55:d9:72:a9:e9:08:78:66:df:3c:f7:
6a:ad:76:eb:8d:9b:3a:7e:35:be:01:e6:a3:3e:b3:
6e:60:84:1b:59:78:97:90:ec:59:0a:1e:b3:bf:57:
03:97:d4:fd:70:da:d4:6d:b2:56:b6:f8:f5:e1:11:
c0:ef:c9:24:77:91:78:d8:af:fa:28:25:9f:99:a5:
88:49:e8:d9:9e:11:6a:21:ab:ff:e5:c3:7e:a9:b7:
10:00:88:35:96:c2:15:40:fb:6f:3f:61:e4:cf:79:
cd:cd:56:96:39:d1:98:f2:21:26:10:20:33:b8:b1:
46:48:c6:98:87:5d:e2:a0:8d:fb:47:19:11:7e:db:
d4:f1:d4:f9:7c:24:ef:2d:be:fe:e5:ce:18:00:36:
4f:2b:ae:9d:76:0e:08:36:ff:f1:80:6b:d3:e1:2c:
57:c0:ed:01:ec:78:04:f0:d7:ce:30:c1:77:74:96:
42:1e:23:56:40:39:55:17:a0:3c:61:f2:bb:2d:af:
8b:5e:ea:1b:c8:2c:17:96:74:2c:be:8a:39:2d:1d:
e4:50:1e:98:80:38:eb:58:12:f6:66:89:6f:2b:ac:
a5:40:8e:1b:e2:6d:8f:97:51:d3:7a:b5:84:db:c4:
1b:b9:80:1f:61:3b:5e:51:ca:3f:9f:a2:23:5e:41:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:16:C3:EE:7D:68:A9:37:E9:98:B3:D8:F9:CE:F2:49:D1:46:FC:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2bb7aa4-2b0d-3735-8607-f75c9d7d49a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
141.149.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:a0:a4:ab:e8:9a:b2:ec:eb:c4:84:ab:ca:fc:a8:74:10:c5:
21:09:69:ed:6e:19:d5:8e:4f:e8:78:37:a2:c8:a0:9c:7c:52:
ee:66:71:e0:47:6f:69:c3:d3:2d:a5:83:c7:e5:64:64:a2:44:
d6:1f:3c:3c:27:be:08:2a:1c:e6:2c:b9:7b:da:fa:53:15:71:
48:e9:b4:f9:c8:c4:f5:a7:5f:a9:dc:4e:22:18:12:13:ae:67:
8a:61:f4:02:73:98:56:f8:f9:91:af:50:2d:56:16:ae:52:b4:
06:96:ea:a5:d0:78:2b:19:d8:4b:89:96:6e:5c:8a:34:d3:76:
55:1a:ce:44:c1:19:6b:0f:1b:93:3e:82:17:c0:40:01:cf:2f:
d1:2e:04:b0:54:79:bd:39:96:e2:ae:14:75:9d:c9:89:89:db:
c0:a6:8c:f5:3d:82:d7:05:e7:28:c5:4e:37:86:fc:52:77:60:
b7:ab:be:1e:ef:08:14:b7:6f:73:18:b0:8d:e6:5e:19:77:37:
38:14:9d:77:78:69:29:1a:47:2c:34:07:b3:98:68:f4:fb:af:
14:8c:f8:1b:a6:ce:9b:5d:69:a2:59:82:d2:c2:99:4d:27:03:
e0:da:72:5f:6f:99:25:66:3e:bd:e5:f0:74:98:1d:88:74:f6:
f7:80:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:49 2025 by rpki-client