Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa
File: f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa (raw, json)
Hash identifier: wOConDpuSzzmt+3X4Ss3OwXZJAtwneVHIewgamq7f1o=
Subject key identifier: 7C:D1:E6:4D:B8:0F:85:A4:4C:FA:A5:39:F9:3A:8B:11:8E:0C:78:9F
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F43285848B6261F5EA2BF5F6ED6F21A40
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 13445
IP address blocks: 144.196.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:1f:5e:a2:bf:5f:6e:d6:f2:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=30866c58-3d3f-47be-9c20-962b28594bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:80:26:13:6e:e0:99:2f:2e:bb:93:fd:55:
97:08:e8:ea:39:da:42:db:59:b0:2c:b3:4a:07:1b:
01:f0:42:f5:01:b6:a6:64:53:56:1e:5d:b0:78:3a:
dd:5d:ef:30:7e:8d:f5:6b:18:77:c4:12:b4:47:85:
88:5d:e9:5d:10:c3:95:96:3d:b6:4d:89:15:7c:e0:
ee:95:49:bc:59:95:1e:a6:ca:43:5e:88:3d:54:cd:
5a:82:2f:5e:9d:b0:06:00:8d:32:98:c2:ca:8d:76:
3d:00:8c:26:50:48:fc:b8:c0:e7:50:7e:96:90:00:
a1:8e:1b:63:6d:1b:aa:1a:aa:17:ed:79:15:5e:2b:
d3:d7:1a:63:04:b8:a7:f0:30:de:ef:be:3c:4a:27:
32:16:90:ac:6c:e0:9b:4f:9f:0c:ef:f7:7f:4d:75:
75:61:72:32:0e:24:f7:7a:7a:32:b3:43:de:37:77:
dd:0d:0a:2c:cf:c2:1a:c5:8a:e7:3f:d5:5c:a8:81:
52:5b:bc:9f:aa:70:e1:80:ec:27:32:df:e0:f2:cf:
b3:a9:07:b7:15:6f:92:c7:a2:4c:5b:e1:c2:4e:ab:
7a:2e:4e:b2:e4:cd:c2:99:db:6f:4c:6f:45:61:a6:
1f:4a:28:00:46:ac:f5:54:5b:4a:61:4c:ba:a9:c7:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D1:E6:4D:B8:0F:85:A4:4C:FA:A5:39:F9:3A:8B:11:8E:0C:78:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
144.196.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:c3:70:18:b9:84:0a:89:96:67:52:8a:0b:c7:22:14:05:fe:
70:fb:b2:e9:10:ad:4e:d7:38:97:2f:bd:15:38:c3:6f:a3:21:
86:ef:aa:a0:60:a8:ed:63:49:a9:60:45:8a:f2:db:a2:73:c8:
9b:14:bc:d5:09:df:ac:0f:8c:0a:7d:d7:41:87:17:29:84:56:
db:c6:69:71:49:b1:d5:44:42:56:33:b2:26:dc:88:38:1a:3c:
ad:e3:8e:62:ee:99:58:e2:f2:c9:26:54:60:ed:46:da:c1:03:
7b:29:7e:f4:b0:b5:68:13:76:a7:06:8a:bb:99:d4:fa:95:26:
1e:6c:27:63:e9:d6:78:00:68:b5:b4:d0:42:80:3e:53:aa:f4:
3c:93:ac:fc:84:14:47:9e:10:c7:83:97:7c:b4:d2:6d:4c:ca:
6a:3f:b4:12:4c:45:54:45:49:64:1e:11:1e:bc:9e:97:78:b0:
92:00:c4:96:63:45:e7:a1:ba:51:7d:10:6d:fc:66:b3:55:a5:
23:12:b2:fe:0a:26:ca:46:7e:4f:29:f2:2a:b7:2b:4a:80:2f:
3f:1a:10:45:3f:a9:6b:57:fe:20:45:16:0b:91:2d:9c:ad:74:
84:18:bc:84:76:8d:b4:20:79:dd:04:fa:a3:b2:53:5a:01:4a:
6e:20:57:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:58 2025 by rpki-client