Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/d34b8187-b278-3f2c-8301-e2278f3b89ad.roa
File: d34b8187-b278-3f2c-8301-e2278f3b89ad.roa (raw, json)
Hash identifier: Nqg9GAd0/AznkPZ2IBvQnJ7LutcKjiqHDG0v/yLMol8=
Subject key identifier: 82:7E:DE:FB:23:B5:EA:90:A6:0A:49:40:37:23:83:5C:6F:69:66:05
Certificate issuer: /CN=7adf94af-0a81-4f9a-b7ec-1b257b0f0963
Certificate serial: 010D0C9F4328584845158EA1AE7ADF1878AF6900
Authority key identifier: 6B:65:82:B5:03:8E:8A:EB:CB:E8:21:37:F9:3D:DA:C1:53:B9:11:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/d34b8187-b278-3f2c-8301-e2278f3b89ad.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 33294
IP address blocks: 140.82.224.0/21 maxlen: 21
147.136.192.0/19 maxlen: 19
216.180.0.0/19 maxlen: 19
2606:7440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8e:a1:ae:7a:df:18:78:af:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf94af-0a81-4f9a-b7ec-1b257b0f0963
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=384c756c-38c3-4281-8ca4-8b197209b3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:30:23:ce:70:af:c4:69:e1:57:34:fb:78:
0e:2c:51:e3:f4:4f:af:b3:bc:04:eb:68:bb:66:b4:
da:c1:d2:48:98:25:8c:99:97:a4:2e:5f:12:c3:6e:
36:a4:3c:b4:53:28:6d:65:95:fe:08:71:c9:46:91:
f8:4a:e7:1d:d8:24:f4:0f:7f:cb:24:d0:4f:1b:74:
10:f0:bb:08:13:57:1e:41:01:e8:1f:0a:7f:bc:a4:
f5:f6:ea:10:43:53:fe:5c:d0:c6:4f:0f:96:2a:08:
38:2f:ed:d0:ae:fa:3d:8a:81:91:be:09:e6:f4:f4:
e4:e1:79:7c:f7:e8:c2:da:36:fc:eb:34:a3:e3:21:
d3:21:c4:95:be:99:10:a9:96:27:0a:0f:26:72:96:
a0:23:94:60:ff:77:a0:c6:6a:09:a8:4f:35:85:4b:
49:90:e6:ad:1d:92:b3:11:74:fc:56:ff:f7:89:64:
c3:0d:4a:3f:9e:a2:b7:b6:8b:66:97:03:8c:2d:d8:
e8:97:d0:bd:cf:c4:70:49:05:77:98:f3:ae:21:f0:
e3:d8:a9:94:4e:d9:44:2b:4d:08:63:3a:aa:7c:9a:
ff:1b:5c:24:df:ec:90:51:b4:41:0a:e0:c6:17:cb:
8f:44:b3:77:75:bc:3d:e8:14:dd:1d:be:bd:7a:d8:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7E:DE:FB:23:B5:EA:90:A6:0A:49:40:37:23:83:5C:6F:69:66:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/d34b8187-b278-3f2c-8301-e2278f3b89ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.crl
X509v3 Authority Key Identifier:
keyid:6B:65:82:B5:03:8E:8A:EB:CB:E8:21:37:F9:3D:DA:C1:53:B9:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.cer
sbgp-ipAddrBlock: critical
IPv4:
140.82.224.0/21
147.136.192.0/19
216.180.0.0/19
IPv6:
2606:7440::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:ef:ca:a8:3c:c9:78:24:5a:4e:8b:49:b0:73:24:c3:23:56:
1c:37:0e:9a:f5:18:0f:8e:50:37:4c:73:4b:f1:70:df:a0:34:
8f:28:a5:b0:44:46:fd:84:a9:fa:52:75:ba:e1:bc:8c:23:0e:
df:e4:06:70:c2:8a:73:48:45:e1:de:fd:7b:95:ad:49:0e:46:
43:3c:88:cc:83:39:a1:54:dd:7d:36:2d:47:59:15:41:96:54:
13:9c:b2:81:80:35:74:e7:06:e1:d1:18:cc:1d:1e:67:f6:d9:
0d:b0:f8:cc:17:ba:ab:a8:9d:b2:84:07:1d:98:db:8d:b4:4a:
d5:fc:83:6b:62:9e:7e:b7:27:af:3f:27:1d:de:ca:55:fe:22:
f4:f5:27:53:d6:b1:af:eb:73:ef:9c:6d:4d:55:19:df:75:40:
80:58:a0:0e:39:10:b4:1f:69:b3:53:4c:22:7d:8d:40:f5:a0:
15:85:a1:e8:35:42:e0:6d:30:57:26:ed:0d:2c:d2:df:af:6b:
33:45:ec:a6:06:ea:57:15:0d:ba:12:87:14:98:bc:95:72:a8:
9c:ba:4c:6c:7f:37:e2:41:a0:2e:f8:ed:f4:e7:b4:86:c6:55:
33:50:fd:ff:46:26:3b:12:f5:09:40:87:56:41:ab:6a:8a:21:
ad:7d:d5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:36:37 2025 by rpki-client