Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa
File: 0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa (raw, json)
Hash identifier: jj5Q+RTb6l6IMM06Qs3UDWpWzvzOdM9sUjlfhsHonyU=
Subject key identifier: 74:29:C2:54:F2:56:0E:0F:1C:7B:0F:30:0C:89:D1:BB:D9:4D:BD:01
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285847F2BA38AF2805B4CC31264E00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa
Signing time: Thu 21 Nov 2024 02:00:38 +0000
ROA not before: Thu 21 Nov 2024 02:00:38 +0000
ROA not after: Wed 19 Feb 2025 02:00:38 +0000
asID: 51964
IP address blocks: 140.209.240.0/21 maxlen: 24
140.209.249.0/24 maxlen: 24
140.209.250.0/24 maxlen: 24
140.209.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f2:ba:38:af:28:05:b4:cc:31:26:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Nov 21 02:00:38 2024 GMT
Not After : Feb 19 02:00:38 2025 GMT
Subject: CN=e9ba0231-a6b1-490a-8a1a-23d2e4b0c9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:d1:6a:77:4b:52:af:4c:5c:fd:af:4e:3c:
09:aa:88:3c:23:c9:9d:f0:c8:39:08:cf:df:07:6d:
2b:c3:f7:20:2d:6b:82:c6:b2:a3:05:68:78:6d:f0:
3c:af:01:05:4f:7b:57:51:52:51:14:10:b3:5e:31:
a2:cd:a3:95:ef:73:23:31:fd:48:59:6f:05:c1:ea:
19:1c:fb:e3:19:33:69:90:8f:4f:54:ec:91:13:f3:
9e:3d:f6:ab:17:bf:39:77:1a:1f:a5:2e:a0:2b:5b:
9a:93:bf:d8:72:8e:4b:62:21:69:13:44:1d:f7:1a:
07:3e:72:f7:22:ef:ad:a6:72:c4:d1:62:8f:fd:0c:
50:b6:70:32:21:1a:6e:19:23:79:56:ce:27:57:c1:
1e:43:60:b4:68:bb:8c:d5:33:a4:9e:16:d9:09:cc:
11:9d:21:68:42:b9:e3:a3:49:a2:30:27:7a:16:ff:
9e:7f:ce:ee:14:d7:2f:5b:1e:6c:b8:0a:ee:77:a2:
51:e8:81:02:04:dd:3f:36:94:fa:58:d5:39:be:07:
6d:2f:9c:ca:f7:76:3e:11:87:a1:24:dd:86:cd:d3:
3c:e7:51:6d:aa:40:39:aa:9b:28:11:71:f4:4a:7e:
5a:52:f3:55:42:4a:23:9d:46:03:78:26:9f:86:e3:
e9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:29:C2:54:F2:56:0E:0F:1C:7B:0F:30:0C:89:D1:BB:D9:4D:BD:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
140.209.240.0/21
140.209.249.0-140.209.251.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:c6:df:fa:cd:c3:cd:3e:c1:7b:a3:62:3f:7c:fb:6e:03:e7:
bd:a7:eb:3d:00:7a:e2:7c:33:0d:6a:cd:50:fa:02:ea:a4:73:
e5:26:a6:8d:73:a5:2f:3e:ce:eb:c3:56:6c:1a:e5:92:78:e7:
d4:88:f9:6e:f9:0e:a9:d9:8c:15:f5:bb:c6:5b:d9:61:6f:21:
2d:cd:ea:1f:5e:74:ba:63:0d:f5:34:28:19:38:22:50:8c:88:
e5:b5:32:5d:99:a5:91:a8:7e:c2:71:30:20:e5:77:ef:21:d6:
f7:99:9c:2c:8c:fd:05:11:26:96:23:56:09:45:67:63:bc:37:
cd:3e:a0:32:2f:9c:7e:54:a8:95:59:e0:4a:d8:de:a7:5d:58:
05:ed:1e:09:58:61:9c:d2:66:81:a1:bd:cb:ff:b1:70:6c:ae:
3b:46:ab:46:de:bd:24:4d:08:9a:4a:14:e0:e7:02:3e:c8:c8:
07:b5:ed:54:00:7d:d9:62:78:16:2a:30:e1:7b:b6:b6:08:de:
53:75:a3:28:a5:69:fd:c5:26:3a:e6:81:59:20:ce:ca:53:8f:
34:41:d9:59:52:db:0b:8f:23:ad:0c:da:84:f5:53:8a:41:06:
14:30:57:c5:1a:0c:3b:f3:a9:06:12:e2:95:4b:32:aa:1e:e1:
c1:87:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:49:08 2025 by rpki-client