Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/ee631945-7dbf-3f5f-9e76-e701856b60a2.roa
File: ee631945-7dbf-3f5f-9e76-e701856b60a2.roa (raw, json)
Hash identifier: xRXJLqPrrGXGZmYqYJzRxFu9V/vtC/Vf4KJCsbe0UBM=
Subject key identifier: B1:18:E2:90:7D:24:6E:3C:80:4E:B4:30:28:E5:9E:B5:B2:FF:7B:06
Certificate issuer: /CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f
Certificate serial: 010D0C9F432858484D758963087C654AF06F8900
Authority key identifier: 38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/ee631945-7dbf-3f5f-9e76-e701856b60a2.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 393316
IP address blocks: 141.193.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:89:63:08:7c:65:4a:f0:6f:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=890561ea-76f8-467a-b4be-850f94614486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:95:75:ff:5a:03:31:aa:98:b7:da:8e:02:
cf:fe:66:5e:6e:fc:21:0a:80:67:68:a8:75:11:c4:
8c:02:09:7a:05:6f:6a:2e:db:ed:de:1b:36:6e:83:
0c:8a:37:ee:1d:3c:c5:05:a9:b9:ac:51:80:b5:4d:
e3:d3:a1:bb:a8:7b:ed:e3:d1:22:dd:f1:88:1d:82:
e4:15:d6:dc:be:73:19:be:bf:64:2f:32:ce:73:3b:
32:bf:49:38:73:bb:cf:f9:f8:37:1c:9d:3b:2b:c2:
ba:64:f3:d2:e8:f2:a0:54:65:a1:f8:24:f3:50:8b:
2e:c5:91:ed:6a:ba:6e:c3:7b:0c:47:74:7e:fa:40:
ae:1a:c6:2b:35:07:5d:7a:1a:92:d3:a0:41:d9:4e:
f7:4b:8e:35:f3:fa:29:bc:64:17:a3:0a:02:95:12:
57:c7:ff:05:1c:cd:f2:b2:02:50:55:f9:4c:a4:f7:
9f:69:a7:f5:c4:42:ff:da:62:fe:8c:b8:87:f2:66:
0e:ea:c0:01:53:d3:e6:2e:40:09:98:7e:89:ee:63:
ba:78:46:f7:0b:ab:d2:47:79:b3:6b:b7:01:c8:3f:
2b:81:56:1a:90:e7:ff:9b:d9:af:6f:44:93:d2:a8:
87:68:2a:65:e8:2b:b0:5a:b1:0e:b5:77:c1:e7:46:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:E2:90:7D:24:6E:3C:80:4E:B4:30:28:E5:9E:B5:B2:FF:7B:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/ee631945-7dbf-3f5f-9e76-e701856b60a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl
X509v3 Authority Key Identifier:
keyid:38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:24:f5:79:8f:ec:89:9f:84:d0:94:3f:ad:81:8f:1e:4b:a7:
d6:d2:61:78:68:ba:29:0b:57:83:d7:13:35:60:19:04:2e:01:
73:d3:60:96:89:bb:c7:6c:d7:ca:e0:d4:b1:65:9f:c2:c0:af:
4a:7b:4e:3e:35:b4:c2:1b:aa:eb:20:34:d2:d8:1e:9a:b6:dc:
9d:6c:e0:ed:3c:2c:d0:cc:c5:ac:87:d6:47:bf:8a:73:44:c8:
c7:36:98:a7:9b:12:88:b6:f0:4c:a3:c9:3f:59:3b:9c:75:e6:
3f:ca:84:7b:f7:65:d1:ab:b8:3d:f0:a9:0c:aa:54:c4:3e:e2:
dc:b9:e4:86:ce:d1:06:11:33:79:28:76:43:aa:ea:a4:12:d6:
70:fb:b7:e2:8c:95:0f:c9:9f:66:c6:08:d1:68:dc:67:c3:3c:
ef:58:de:4b:18:2f:c7:4b:ea:2a:62:5d:81:c8:34:a0:ea:65:
05:5e:c7:30:65:75:64:06:6a:5a:1e:a7:44:92:72:9d:04:30:
62:0b:af:ad:1d:bd:03:69:9e:90:46:b2:a5:af:34:ce:52:75:
b8:29:37:3c:57:60:d4:fc:c3:9f:cf:94:bd:a4:19:0c:ae:36:
d0:96:6b:16:b2:82:14:34:a8:a7:e3:9d:60:f4:22:37:05:b6:
13:f5:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:23:01 2025 by rpki-client