Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/34fb02c0-a7e6-3331-99f7-cea22f155b7f.roa
File: 34fb02c0-a7e6-3331-99f7-cea22f155b7f.roa (raw, json)
Hash identifier: odHyjzo3ZLjQ+PlFrhKstvxijwL1sTuFUg+e2oVqFO4=
Subject key identifier: 3C:A5:B1:72:E3:51:31:62:B1:92:6A:1C:E4:E1:C5:E8:04:A3:FC:80
Certificate issuer: /CN=20a16a9a-6641-447a-8644-025fca0c6683
Certificate serial: 010D0C9F43285848626589765E9BDD525F629980
Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/34fb02c0-a7e6-3331-99f7-cea22f155b7f.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 397423
IP address blocks: 140.235.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:89:76:5e:9b:dd:52:5f:62:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=5694dadc-acb3-4704-8250-e579e0d738ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:c9:b6:22:85:1f:09:82:2a:64:91:50:ec:
d3:b8:01:97:d6:74:f1:c2:b8:a9:c9:1f:29:dd:0f:
a0:09:c6:6d:db:af:c4:de:81:71:1c:98:86:43:56:
09:5a:81:e7:6f:ca:6e:89:8b:ef:a5:9b:cb:ea:aa:
1f:0a:d4:84:3b:46:e7:5e:79:f6:7b:3b:c1:e7:4d:
89:ef:64:12:d5:86:97:e4:f6:b1:76:f5:aa:1a:65:
b3:7a:67:d3:d2:c5:56:b8:3f:34:7e:80:da:23:45:
3a:7b:9c:03:3e:7a:1f:22:c0:e6:4a:80:4a:ab:b5:
c4:97:c0:94:4d:28:0a:5b:9d:55:03:94:9e:11:79:
25:64:72:99:05:10:57:dc:28:e9:43:35:98:41:48:
e1:76:45:41:ea:d8:06:65:98:c8:4d:69:93:3f:49:
7a:e6:30:17:93:8d:36:b1:f0:b9:52:2b:6c:11:2f:
06:01:f7:2c:d0:a4:8e:e8:b2:8e:9d:67:bf:37:2b:
35:ef:eb:51:da:d9:d3:86:eb:93:b1:39:5b:6a:8e:
a0:26:48:ab:d9:cb:32:74:bc:c6:ea:5d:7a:c3:ba:
d2:ea:fe:8e:c9:06:eb:d3:b5:b7:e4:38:fb:93:a1:
00:14:15:62:02:b9:70:cb:ab:8c:e3:58:55:92:f7:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:B1:72:E3:51:31:62:B1:92:6A:1C:E4:E1:C5:E8:04:A3:FC:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/34fb02c0-a7e6-3331-99f7-cea22f155b7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl
X509v3 Authority Key Identifier:
keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:73:98:b8:56:4a:c7:9a:b2:40:fe:de:9a:11:8e:33:b5:80:
96:9c:9d:74:40:01:52:c0:98:49:72:71:00:ba:af:68:80:7c:
f0:6a:e8:6b:f8:8e:aa:ea:4c:b7:b9:1f:94:c0:ef:97:20:5e:
38:8a:33:3a:63:c1:64:10:dd:91:a9:10:d0:2d:da:85:8e:b6:
65:7e:cb:ff:0f:fa:2e:39:e1:d5:88:60:26:6c:b8:ea:71:a4:
80:a3:b8:85:31:d5:39:1c:a1:3b:4a:bf:77:02:d2:d2:33:a0:
6a:ec:78:83:12:d1:98:1a:f4:d8:8a:84:5b:a0:17:e8:4c:7e:
f0:5b:ae:8e:84:71:5d:e8:fd:c2:64:cd:1c:16:36:cc:88:54:
e4:57:6b:bd:4b:1f:1a:bc:e8:84:1c:ad:f0:de:e6:b5:40:a0:
49:52:60:ca:d3:7a:73:73:71:fb:ae:c3:13:7f:09:23:73:5a:
8b:20:9e:2c:d8:c8:a7:db:30:cd:a5:5b:d7:e3:c0:3b:8d:eb:
db:3e:38:8e:c9:a8:8a:3d:f5:a9:46:06:1c:fc:2a:29:2a:5f:
f4:10:80:6b:96:55:9e:4c:4e:50:99:2c:26:0d:4b:30:40:4d:
d7:1b:63:42:65:97:34:a0:11:f7:e1:28:3f:20:e9:7b:13:b1:
44:5c:d9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:37 2025 by rpki-client