Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/436bb959-c752-3693-8050-3b420f947125.roa
File: 436bb959-c752-3693-8050-3b420f947125.roa (raw, json)
Hash identifier: tTh+u0HUNdFYTVFWbRvMbe2eGJ0NzFS0eWR6Nu3fHYg=
Subject key identifier: CF:89:CE:15:FC:73:40:78:15:7E:F4:A9:CE:F5:C4:92:F3:A3:91:27
Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial: 010D0C9F432858488AE0A26CB7FC782AC1639F60
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/436bb959-c752-3693-8050-3b420f947125.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 141.193.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a2:6c:b7:fc:78:2a:c1:63:9f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=f78390f8-7bce-4edf-9741-e243ac496f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:7a:88:36:83:29:29:a1:c7:a1:dd:8d:1a:
e3:63:af:53:23:f1:db:b8:dd:05:59:84:09:36:4f:
3e:84:5d:8f:7a:49:11:d8:2a:e3:ce:8c:e3:c7:62:
48:90:be:2e:8f:03:30:c6:e6:94:0d:46:d1:a1:c8:
80:d2:b2:ff:92:96:1a:56:e1:c6:da:2c:79:01:5d:
f6:29:20:6f:c7:c3:b7:55:d9:51:39:44:61:ad:92:
04:bf:81:22:9a:8d:0c:4f:9c:02:51:41:0a:8c:c5:
e0:3b:2a:16:ec:c1:b8:10:0d:f0:a2:20:76:23:a6:
65:ef:76:6f:35:64:40:b7:8a:7c:f1:c6:17:6c:bb:
74:bb:79:24:2c:a8:99:06:a2:31:08:19:86:f8:74:
d0:6d:45:c0:90:ce:f9:f8:f4:b6:e4:46:81:aa:f4:
b0:6b:2c:d1:03:1e:b3:d9:e5:54:66:f2:24:2c:af:
08:bc:91:01:b0:3f:f2:f2:69:64:9e:30:36:45:b7:
ad:cd:55:a2:93:ac:52:fd:cc:ee:20:18:9f:3d:c3:
8e:f2:14:be:90:ec:d4:59:83:40:13:96:07:d9:20:
3a:13:00:96:00:5e:ea:8d:79:ca:78:f6:0f:09:ef:
41:26:bc:fb:e4:b5:2f:e3:fe:c6:bd:ad:00:f3:42:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:89:CE:15:FC:73:40:78:15:7E:F4:A9:CE:F5:C4:92:F3:A3:91:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/436bb959-c752-3693-8050-3b420f947125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
X509v3 Authority Key Identifier:
keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:0b:82:c7:a3:ba:3f:a2:c4:de:84:5b:52:9e:2c:58:0f:8b:
eb:1a:e2:8f:5f:1b:0c:7c:94:e0:95:2c:79:a4:6f:9d:1d:f2:
ee:11:62:29:0e:61:ca:8a:c4:71:0a:84:a8:ca:6f:d4:1d:56:
e9:c7:6d:16:eb:7e:2c:7e:08:00:25:ca:a2:29:3c:bb:94:2e:
11:17:94:8e:8c:0f:5f:48:bf:ac:b7:c0:e2:ea:cd:a9:4f:42:
50:76:85:c1:a1:50:40:7e:2c:64:20:f7:48:23:af:86:4f:1e:
20:26:6b:8c:42:03:e7:b1:fe:ca:4e:54:10:0e:13:02:2d:52:
97:f0:a5:82:a8:42:8a:67:16:51:04:76:df:aa:3e:e1:15:30:
48:44:e3:24:f4:a1:b1:e6:80:5f:e1:83:d1:31:d3:bc:4d:8a:
dc:1d:34:fb:4f:33:07:12:3f:81:38:63:c9:72:8f:7b:f7:d1:
85:35:04:14:03:6d:19:97:ea:c1:61:70:2f:8a:52:c1:18:4c:
b0:ca:36:0c:a2:83:a5:a9:f4:20:f4:08:90:19:2b:d0:af:66:
a2:0f:16:8e:87:60:60:bf:f9:08:8b:12:31:0e:b2:1e:1b:f5:
6f:03:1a:75:b9:c1:40:2e:0f:91:af:11:da:b1:e8:53:58:3c:
17:97:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:59 2025 by rpki-client