Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/42b9e44c-659d-35fa-8da3-8f2339416b02.roa
File: 42b9e44c-659d-35fa-8da3-8f2339416b02.roa (raw, json)
Hash identifier: nA50eIA97O9neEm7540wesrqLGv0REBJ/CEKLZfOHng=
Subject key identifier: 71:B9:F5:0E:4E:8D:B7:42:8A:CC:E4:B2:0B:90:E5:8B:8F:CD:39:5C
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285848143A8246D0B9C2FDDEA451C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/42b9e44c-659d-35fa-8da3-8f2339416b02.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 3477
IP address blocks: 140.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:82:46:d0:b9:c2:fd:de:a4:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0a568dab-9656-4462-8b83-a750fb36c763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:80:82:90:3c:06:94:4f:fc:e3:31:f6:5c:43:
6f:33:bb:0c:d6:66:13:ab:cf:bb:89:aa:2a:97:3d:
d6:ad:67:99:c5:df:fe:3a:69:50:07:2b:d8:c2:64:
18:32:82:aa:20:cc:14:03:8d:9f:be:4d:24:ef:ae:
5f:38:70:02:94:95:e6:f7:2b:8b:ce:a4:10:65:b2:
65:55:de:ec:08:f9:91:38:f8:2d:03:1e:de:97:31:
e9:21:cd:08:fb:d5:1e:a3:cd:8b:f2:bf:a9:87:85:
57:3d:44:60:db:3e:6a:6d:2c:12:b3:a1:e5:e9:d9:
07:3e:49:a4:c7:60:a1:d1:e8:3d:97:9d:72:89:65:
e8:ba:28:d2:fc:a8:ac:b0:e3:48:44:7b:0f:1f:ed:
f3:6c:6c:50:45:2a:1e:d2:51:56:b3:00:3c:55:4d:
5a:cc:04:95:ae:6e:49:4c:3e:56:4d:84:70:99:c7:
b1:40:2b:1e:a2:dc:df:8d:23:ab:15:b3:30:6e:8e:
fa:11:a7:4e:b6:95:6c:b7:aa:15:ac:07:0d:41:77:
49:7f:6f:15:af:0a:b5:09:ce:5c:72:bc:7e:b2:1d:
c2:28:c6:1b:a7:51:cf:ba:c7:0d:42:78:e6:44:8c:
32:34:c1:2a:8b:87:d8:87:43:46:af:29:41:85:d1:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:F5:0E:4E:8D:B7:42:8A:CC:E4:B2:0B:90:E5:8B:8F:CD:39:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/42b9e44c-659d-35fa-8da3-8f2339416b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
140.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:e3:40:a8:76:ef:0b:b8:95:ca:e1:0e:b4:30:e9:49:01:c1:
e9:c5:e1:27:8b:c3:f8:0e:6e:59:a9:f4:52:6b:1e:a4:ee:2a:
51:18:b5:c0:79:be:4a:12:5f:0b:5f:e8:5a:4c:bb:14:c8:14:
74:0a:d3:b4:07:38:3b:9f:c6:d6:83:8a:6f:ca:b1:c4:08:f2:
e4:8b:72:5c:ea:cb:98:bf:36:62:61:68:1b:5f:64:dc:67:0e:
b4:ef:36:65:f6:5e:83:ce:3c:98:ee:bb:34:9e:99:a0:0c:4b:
8f:b3:b9:17:23:db:0a:13:2f:4f:5a:5e:4a:3a:1f:a0:86:5a:
7f:b9:8a:f4:d2:22:81:35:e8:3c:6c:08:b8:0e:4a:e3:a5:b8:
ad:e3:74:5b:c5:16:ed:9d:b9:a2:33:58:59:8d:b3:31:8f:40:
08:f0:44:c5:3a:bd:ea:13:eb:b2:0a:60:49:2b:5e:1c:00:35:
72:42:a3:4b:05:cd:b9:01:cb:86:4d:fc:f4:6f:0e:16:92:11:
46:9d:a5:ef:c9:4c:2e:41:9a:cb:46:34:7c:15:f7:4d:65:b0:
e3:95:6c:15:b6:3e:22:71:1f:93:ca:d2:da:3f:87:e0:84:60:
73:a0:81:49:26:f5:4e:7e:de:73:64:78:21:db:0e:f0:d8:ef:
a5:44:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:21:24 2025 by rpki-client