Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa
File: 549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa (raw, json)
Hash identifier: i59kCeSrQBigGTfalCrsCriO/JG6EJikABOrsrx9spw=
Subject key identifier: 87:73:E2:8F:1C:EF:46:C7:ED:15:0B:85:D6:72:78:5E:12:75:5D:93
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F43285848467ABC592FFED43825ABD588
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 398156
IP address blocks: 158.120.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bc:59:2f:fe:d4:38:25:ab:d5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=2e71d641-26aa-4bf3-91ca-d6a7a0ca4a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5a:66:77:9d:7b:22:7a:6c:b9:62:8a:b7:d3:
39:33:6f:0f:12:25:ba:17:af:71:af:ba:8c:b1:38:
d9:60:1a:f9:83:3d:8d:cc:8f:a9:63:dc:3d:77:78:
36:ed:d5:d1:2e:ca:da:4f:b8:cc:2e:66:a5:e6:0c:
d1:49:20:c1:56:9a:da:a4:de:29:f9:65:05:b9:82:
8c:f3:2b:39:13:a2:39:d7:68:82:67:7a:60:c0:26:
64:17:f4:90:e0:63:02:79:b1:19:fb:db:68:c1:72:
b5:85:52:3b:8d:f8:08:2e:2c:7c:95:16:06:e9:c0:
3a:e3:27:d3:41:30:69:ed:76:29:99:31:8d:93:64:
2d:95:34:db:0f:66:bf:7e:9d:09:b5:16:98:61:aa:
30:89:61:b8:2b:76:41:09:23:e0:ef:34:be:33:16:
52:f5:08:b3:06:79:9e:25:44:9a:9b:de:2a:fa:65:
07:1e:26:84:f1:3e:0e:a9:4f:70:ed:96:29:54:22:
ba:f1:dc:47:05:f2:7c:10:dd:c0:09:62:83:9e:b6:
2f:db:f3:87:80:fd:f5:f6:1c:c0:00:0b:c0:44:58:
9e:46:b4:c7:20:78:15:48:29:14:b5:ec:f1:59:dc:
47:d6:1e:40:b5:a0:61:af:7d:e7:69:c3:8b:29:1f:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:73:E2:8F:1C:EF:46:C7:ED:15:0B:85:D6:72:78:5E:12:75:5D:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:9b:1d:89:9d:9f:0f:04:3f:27:65:ef:e9:6b:fe:28:57:45:
93:2d:a0:4d:0f:70:da:7f:22:8b:f6:7e:f3:bc:d7:38:17:77:
e4:51:3d:ea:9e:12:2b:50:ab:8b:fd:18:c0:c5:66:ea:7d:f3:
b3:60:a2:e2:46:c6:c1:d9:b3:bd:77:fa:8d:a2:5f:cc:9d:87:
b2:4b:89:a8:80:b2:27:15:66:d8:6e:7e:c3:2a:a9:ea:2f:b1:
b3:cd:7f:74:65:a0:ff:c3:5b:f2:bb:a2:35:04:df:d5:05:69:
b0:e3:19:70:cb:2c:34:b4:80:c8:86:77:aa:d8:b0:a0:14:ff:
dc:bb:6c:fe:b5:73:8e:d4:4d:96:cd:0a:36:05:c1:97:16:d5:
2c:e4:7d:b6:a1:cb:e8:59:be:1f:f0:f9:83:91:9a:62:a3:4e:
df:a7:d5:53:c0:d0:28:39:ce:07:fb:63:82:ac:4e:f2:5e:40:
40:64:48:94:21:5c:94:96:2f:97:eb:c5:8f:bd:4a:ec:28:0d:
b4:6e:8c:1e:44:db:b7:d0:e5:dc:83:5c:02:73:06:33:29:5b:
4f:0a:18:ba:fe:1d:df:8d:e8:97:8d:40:7d:4f:b6:6b:56:e8:
3a:62:ef:9b:fc:ba:71:f2:72:90:78:75:11:76:75:52:ec:9f:
3e:a5:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:57 2025 by rpki-client