Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa
File: 0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa (raw, json)
Hash identifier: lg4liS2u8ckfwGifL3HE4iOyQxTv3MK2/8AZDs7jTnM=
Subject key identifier: 36:28:F3:C5:70:75:09:C8:75:85:7F:D2:27:8B:73:E8:F7:E9:E5:06
Certificate issuer: /CN=5f0271af-0900-4d68-9a01-e446c3910a39
Certificate serial: 010D0C9F4328584861004A57D6028B1141CC99C0
Authority key identifier: 92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 53356
IP address blocks: 140.235.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:4a:57:d6:02:8b:11:41:cc:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0271af-0900-4d68-9a01-e446c3910a39
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=8007e40c-b40c-4300-9d58-4025c278c8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0a:48:70:2a:a3:24:4e:de:2d:c2:17:d2:3e:
5d:67:2a:89:90:8f:63:4e:e5:e7:05:30:f7:47:e7:
6f:a2:58:82:fa:c4:47:28:24:79:d8:6b:17:35:98:
94:72:ad:64:f2:8b:87:5d:43:9a:e6:a8:c2:fe:ed:
6c:ee:f8:33:b5:f9:cc:37:64:cb:cd:34:9f:8c:ff:
04:fe:25:8f:5e:03:46:68:09:fb:69:19:63:0e:a9:
1a:a9:a9:75:c3:51:98:2b:d1:1c:27:db:fc:eb:da:
40:5e:c9:5d:04:71:c7:80:5c:8c:70:dd:f3:0d:81:
83:16:c3:d6:1c:62:91:be:2e:1c:74:c8:3a:1e:94:
4d:ce:42:ff:0e:9f:79:96:4c:0d:32:fe:82:26:20:
0a:ef:e0:44:8e:7f:76:02:21:e0:48:ee:54:07:d4:
0e:82:23:5e:d6:65:6d:45:0c:83:e3:2e:f8:d2:0a:
5d:75:93:48:9f:f8:8d:07:bf:e2:b5:51:06:87:1c:
f2:fc:cc:4e:9b:35:17:5a:ed:75:05:24:9f:3d:bd:
8c:3c:65:65:80:7c:68:12:6b:00:48:2b:5d:36:c8:
77:04:c6:73:d8:6f:da:0b:53:6f:e8:be:a3:5c:b0:
2e:26:ef:7f:cd:29:67:4d:1f:f3:01:ed:06:da:8f:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:28:F3:C5:70:75:09:C8:75:85:7F:D2:27:8B:73:E8:F7:E9:E5:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/0b78c170-f215-3ee3-b7e2-5f77c9c6823c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39/5f0271af-0900-4d68-9a01-e446c3910a39.crl
X509v3 Authority Key Identifier:
keyid:92:3F:9A:FA:35:22:EC:6A:5B:BF:ED:78:90:A1:C3:8A:C6:7C:C2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f0271af-0900-4d68-9a01-e446c3910a39.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:b2:04:d5:ce:f4:2f:24:93:12:8b:5f:c6:48:a3:70:03:f8:
fc:84:ad:78:ec:06:9a:0a:7a:07:06:3e:ed:81:94:ec:59:62:
e7:64:d3:2d:ac:a6:91:33:3a:e8:43:3a:3f:09:89:aa:dd:26:
49:12:65:9b:ce:69:18:47:fa:a3:b2:05:62:43:c8:08:cc:39:
26:99:0a:ef:af:e2:02:ba:cd:d3:c6:ed:68:48:a5:75:63:86:
fc:ab:58:eb:96:f7:d0:77:c3:3a:00:ce:6d:54:7d:11:79:98:
87:77:eb:70:67:09:01:f5:02:a0:2b:50:d1:29:a3:13:ba:f7:
7e:e6:3d:86:28:2e:fb:27:f0:6c:05:54:8f:e9:1c:5b:bc:81:
d3:d2:b5:c9:e9:dd:45:1c:eb:74:63:05:be:65:b5:f8:68:9c:
26:cb:32:44:0f:1b:91:e4:74:a7:33:49:54:38:c4:9b:e2:b2:
91:11:c3:2e:4f:96:df:2b:2e:62:3d:0e:68:07:54:a8:40:06:
57:68:68:1d:21:20:34:b6:0a:1a:55:64:dd:2d:1e:01:f6:66:
71:10:ca:ec:02:e3:1d:18:51:7e:af:3d:60:55:27:62:a1:da:
f9:37:8e:41:ba:49:75:49:b5:c3:d9:d4:00:4f:77:1f:34:22:
fc:3c:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:03:39 2025 by rpki-client